Project

General

Profile

Todo #6587

interfaces_gif_edit.php: Link flag changes need to catch up with FreeBSD

Added by Jim Pingle over 3 years ago. Updated over 3 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Interfaces
Target version:
Start date:
07/07/2016
Due date:
% Done:

0%

Estimated time:

Description

link0 is no longer supported on gif, it used to be multi-destination behavior, we had it labeled as "route caching" -- it needs removed.

link1 is still "ECN Friendly" and is OK

link2 is new and is Outer Source Filtering:

A malicious party may try to circumvent security filters by using tun-
nelled packets. For better protection, gif performs both martian and
ingress filtering against the outer source address on egress. Note that
martian/ingress filters are in no way complete. You may want to secure
your node by using packet filters. Ingress filtering can break tunnel
operation in an asymmetrically routed network. It can be turned off by
IFF_LINK2 bit.

Associated revisions

Revision ab28a010 (diff)
Added by Jim Pingle over 3 years ago

Align GIF link options with those currently supported by the base OS. Ticket #6587

Revision b9087e1d (diff)
Added by Jim Pingle over 3 years ago

Add upgrade code to clean up the old GRE/GIF flags that are no longer used. Ticket #6586 and Ticket #6587

Revision 2cc19f46 (diff)
Added by Jim Pingle over 3 years ago

Align GIF link options with those currently supported by the base OS. Ticket #6587

Revision ee9fb7bc (diff)
Added by Jim Pingle over 3 years ago

Add upgrade code to clean up the old GRE/GIF flags that are no longer used. Ticket #6586 and Ticket #6587

History

#1 Updated by Jim Pingle over 3 years ago

  • Status changed from New to Feedback

Tested OK here. Leaving open for another run once it's in snapshots.

#2 Updated by Chris Buechler over 3 years ago

  • Status changed from Feedback to Resolved

all good

Also available in: Atom PDF