netdev - fou: udp encapsulation - how to configure multiple ports per tunnel

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <d7f24185-46c4-d038-7a5e-a0bd3ee4ec58@ng4t.com>
Date:   Mon, 30 Jan 2017 15:52:00 +0100
From:   Mihail Dakov <mihail@...t.com>
To:     netdev@...r.kernel.org
Subject: fou: udp encapsulation - how to configure multiple ports per tunnel

Hi there,

I am having trouble setting up the following tunnels on the tx path.

#!/bin/bash

sudo ip link add name fou11 \
type ipip \
remote 192.168.1.1 \
local 192.168.2.1 \
encap fou \
encap-sport 21001 \
encap-dport 21001

sudo ip link add name fou21 \
type ipip \
remote 192.168.1.1 \
local 192.168.2.1 \
encap fou \
encap-sport 21002 \
encap-dport 21002

this script returns:

RTNETLINK answers: File exists

which tells me that the kernel doesn't use sport and/or dport to
identify a tunnel.

Is it possible to configure a tunnel with different dport and/or sport?
If so how?

P.S. On the other hand if this was possible then the kernel would need
some policy to decide which dport and/or sport to use for each packet
arriving in this tunnel.

br,md.

Download attachment "signature.asc" of type "application/pgp-signature" (834 bytes)