netdev - Re: IPv6: proxy_ndp to a network range

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20160509145109.GB7267@omega>
Date:	Mon, 9 May 2016 16:51:10 +0200
From:	Alexander Aring <alex.aring@...il.com>
To:	"H. Peter Anvin" <hpa@...or.com>
Cc:	netdev@...r.kernel.org
Subject: Re: IPv6: proxy_ndp to a network range

Hi,

On Mon, May 09, 2016 at 01:46:13AM -0700, H. Peter Anvin wrote:
> On May 9, 2016 1:39:08 AM PDT, Alexander Aring <alex.aring@...il.com> wrote:
> >Hi,
> >
> >On Mon, May 09, 2016 at 01:06:51AM -0700, H. Peter Anvin wrote:
> >> Hello,
> >> 
> >> There currently doesn't seem to be any support for proxy_ndp of a
> >whole
> >> network mask, as IPv4 proxy_arp seems to permit.
> >> 
> >> a) Am I actually correct in this, or am I just missing something
> >important?
> >> 
> >> b) Is there a technical reason for this, or is it just a limitation
> >of the
> >> current implementation?
> >> 
> >
> >So far I know you can do this with the ndppd [0] userspace tool which
> >listen
> >NS/NA messages and do the ip -6 neigh add proxy for you.
> >
> >- Alex
> >
> >[0] https://github.com/DanielAdolfsson/ndppd
> 
> Sure, but it seems like a workaround for something that ought to be simpler?

I don't know if there exists a simpler way, but I would also be
interested into that.

There are some people @linux-wpan which wants to plugin an ethernet cable
and everything works out of the box to access the 6LoWPAN network over
the ethernet connection without doing routing setup stuff.

"ndppd" was on my list to test for realize such setup. :-)

---

For the simpler solution do you want to move the actually mechanism what
"ndppd" does into the kernel?

- Alex