Skip to content
Snippets Groups Projects
  1. Nov 21, 2018
    • Matthias Schiffer's avatar
      gluon-mesh-vpn-core: add gluon-wan exec wrapper · eda3aa33
      Matthias Schiffer authored
      gluon-wan is a sudo-like exec wrapper that switches the process group to
      gluon-mesh-vpn, making it use the WAN dnsmasq rather than resolving over
      the mesh.
      
      Note that this only affects DNS at the moment. Processes running under
      gluon-wan will still use the regular mesh IPv6 routing table, and not the
      WAN routing table. This is not a problem for IPv4, as there is only one
      IPv4 routing table.
      
      Fixes #1575
      Unverified
      eda3aa33
  2. Nov 18, 2018
  3. Nov 17, 2018
  4. Nov 16, 2018
  5. Oct 14, 2018
  6. Oct 11, 2018
  7. Sep 29, 2018
  8. Sep 15, 2018
  9. Sep 05, 2018
  10. Sep 01, 2018
  11. Aug 24, 2018
  12. Aug 23, 2018
  13. Aug 19, 2018
  14. Aug 06, 2018
  15. Aug 03, 2018
  16. Aug 01, 2018
  17. Jul 29, 2018
  18. Jul 25, 2018
  19. Jul 22, 2018
    • Sven Eckelmann's avatar
      gluon-client-bridge: Revert "move IPv4 local subnet route to br-client (#1312)" · 3ef28a46
      Sven Eckelmann authored
      The commit b3762fc6 ("gluon-client-bridge: move IPv4 local subnet route
      to br-client (#1312)") moves the IPv4 prefix from the local-port interface
      to br-client. A client requesting an IPv4 connection to the IPv4 anycast
      address of the node (the device running gluon) will create following
      packets:
      
      1. ARP packet from client to get the MAC of the mac address of the anycast
         IPv4 address
      2. ARP reply from node to client with the anycast MAC address for the IPv4
         anycast address
      3. IPv4 packet from client which requires reply (for example ICMP echo
         request)
      4. ARP request for the client MAC address for its IPv4 address in prefix4
         (done with the mac address of br-client and transmitted over br-client)
      5. IPv4 packet from node (transmitted over br-client with br-client MAC
         address) as reply for the client IPv4 packet (for example ICMP echo
         reply)
      
      The step 4 and 5 are problematic here because packets use the node specific
      MAC addresses from br-client instead of the anycast MAC address. The client
      will receive the ARP packet with the node specific MAC address and change
      their own neighbor IP (translation) table. This will for example break the
      access to the status page to the connected device or the anycast DNS
      forwarder implementation when the client roams to a different node.
      
      This reverts commit b3762fc6 and adds an
      upgrade code to remove local_node_route on on existing installations.
      3ef28a46
Loading