Re: About IPv6 support
Alexandre Cassen <[email protected]>
| Newsgroups | gmane.linux.keepalived.devel |
|---|---|
| Message-ID | <[email protected]> |
Hi Tore, > On 09 Apr 2015, at 13:35, Tore Anderson <[email protected]> wrote: > RFC5798 requires that the addresses associated with the virtual router > is included in the VRRP packet. So if you decide to not do so, you'll > actually end up implementing something that is similar to, but not > quite, VRRP version 3. This might also break interoperability with > other VRRPv3 implementations such as Juniper and Cisco devices, making > it hard to migrate a network from these to Keepalived (or vice versa). > > Finally I'd like to point out that for VRRPv2/IPv4, Keepalived already > *does* include the VIPs in the VRRP packets it transmits. So this > standard-compliant behaviour cannot really be considered a "serious > security issue"... I will make it tweakable, I am right now merging a bunch a new patches. on this topic, Keepalived current code is adding 20th v4 VRRP VIPs in adverts. I get your point, sure, but I will never use in production my side this standard-compliant behaviour… for multicast use-case I must admit it is ok, but for unicast… will make it in the code in a way that users can select one or another. regs, Alexandre ------------------------------------------------------------------------------ BPM Camp - Free Virtual Workshop May 6th at 10am PDT/1PM EDT Develop your own process in accordance with the BPMN 2 standard Learn Process modeling best practices with Bonita BPM through live exercises http://www.bonitasoft.com/be-part-of-it/events/bpm-camp-virtual- event?utm_ source=Sourceforge_BPM_Camp_5_6_15&utm_medium=email&utm_campaign=VA_SF _______________________________________________ Keepalived-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/keepalived-devel