netdev - Re: GRE tunnels bound to VRF

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <afef6b77-9981-459e-b6fb-883c02eb9c48@kernel.org>
Date: Tue, 19 Nov 2024 11:08:25 -0700
From: David Ahern <dsahern@...nel.org>
To: Eyal Birger <eyal.birger@...il.com>, Ben Greear <greearb@...delatech.com>
Cc: Ido Schimmel <idosch@...sch.org>, netdev <netdev@...r.kernel.org>
Subject: Re: GRE tunnels bound to VRF

On 11/19/24 11:04 AM, Eyal Birger wrote:
> On Tue, Nov 19, 2024 at 8:58 AM Ben Greear <greearb@...delatech.com> wrote:
>>
>> On 11/19/24 8:36 AM, David Ahern wrote:
>>> On 11/19/24 7:59 AM, Ben Greear wrote:
>>>>
>>>> Ok, I am happy to report that GRE with lower-dev bound to one VRF and
>>>> greX in a different
>>>> VRF works fine.
>>>>
>>>
>>> mind sending a selftest that also documents this use case?
>>>
>>
>> I don't have an easy way to extract this into a shell script, but
>> at least as description:
> 
> FWIW I once created a tool for helping to jumpstart such scripts - see
> https://www.netpen.io
> 
> If I use it to create something similar to what you've described, the
> outcome is something like this (the link just encodes the relevant
> diagram info in b64):
> 
> https:://netpen.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
> 
> Eyal.

pretty cool. FYI - extra ':' in that URL