linux-kernel - Bind wiregard interface to VRF

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <f2aefd64-8881-4690-aacc-ad676c9826e7@candelatech.com>
Date: Sun, 17 Nov 2024 12:52:34 -0800
From: Ben Greear <greearb@...delatech.com>
To: Linux Kernel Mailing List <linux-kernel@...r.kernel.org>
Cc: "Jason A. Donenfeld" <Jason@...c4.com>
Subject: Bind wiregard interface to VRF

Hello,

I am interested in binding wireguard interface to a VRF.

I was thinking the parentdev option in 'ip link add' logic could be used to
set the bind_ifindex in the 'struct udp_port_cfg' object.  I didn't fully follow
this through to see if it could work, but it seems likely.

Something like:

ip link add wg1 type wireguard parentdev vrf1

I think as long as the UDP socket is created/bound with something similar to how
user-space applications often support --interface eth1 argument, then it would do
what I want.

I'm curious if there has been any effort in this direction or if anyone has suggestions
for most acceptable path forward.

Thanks,
Ben

-- 
Ben Greear <greearb@...delatech.com>
Candela Technologies Inc  http://www.candelatech.com