Index | Thread | Search

From:
Theo Buehler <tb@theobuehler.org>
Subject:
Re: bgpd: add infrastructure to support rtr sessions with tcp md5 and ipsec
To:
tech@openbsd.org
Date:
Wed, 2 Oct 2024 16:01:37 +0200

Download raw body.

Thread
On Wed, Oct 02, 2024 at 02:53:05PM +0200, Claudio Jeker wrote:
> This diff adds the infrastructure to support tcp md5 and ipsec
> authentication options for rtr sessions.
> 
> I did not include the parse.y and printconf bits yet since those are just
> a lot of noise. In other words the pfkey calls in here are currently NOPs.

thanks :)

> To properly support tcp md5 the parent needs to know when a session is
> closed, so this adds a new IMSG for that and keeps the connect_elm struct
> for open sockets on its own list.

ok tb

> I do not expect more than a handful of rtr sessions configured so a linear
> list should be fine.

Makes sense to me.