Re: About IPv6 support
Alexandre Cassen <[email protected]>
| Newsgroups | gmane.linux.keepalived.devel |
|---|---|
| Message-ID | <CAONz4a3S0N66Le1mSwyqFbEaYouOxKEd73pH5W=HxTP6-zEDPg@mail.gmail.com> |
Hi, Current code support VRRPv2 for IPv6, I am working on integration of VRRPv3 (originally jonas patch). But, and But, I am not considering adding VRRP VIP into VRRP packet for a simple reason. This VRRP stack is widely used on critical production architectures, I am making a very extensive use of it in my day to day job too. And I am considering as a serious security issue placing those VIPs in each VRRP advert, because it simply expose key elements of your network architecture to potential attackers... You must hide as much as possible any info on your net arch, it a basic consideration. So until some one provide a valid proof of not doing it that way I will not add VRRP VIPs in VRRP adverts. It potentially broke bissection tools like wireshark, but this is not a good reason IMHO :D regs, Alexandre ------------------------------------------------------------------------------ Dive into the World of Parallel Programming The Go Parallel Website, sponsored by Intel and developed in partnership with Slashdot Media, is your hub for all things parallel software development, from weekly thought leadership blogs to news, videos, case studies, tutorials and more. Take a look and join the conversation now. http://goparallel.sourceforge.net/ _______________________________________________ Keepalived-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/keepalived-devel