[Bug 278295] security/openvpn{,devel}: Add FIB support for ifconfig(8)

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=278295

--- Comment #17 from Gert Doering <[email protected]> ---
Basically OpenVPN needs to be told where to put the socket (-> use `setfib()`
system call), where to put ifconfig (... fib n command line argument) and
routes.

From the Linux implementation, we know that people actually do want OpenVPN to
install routes into different tables from one profile, which is why
`--route-table <id>` can do this (it will affect all `--route` statements
coming after it).

OpenVPN on Linux has `--bind-dev` to make the socket bound to a given VRF,
which is similar to the route table ID we have here (-> figure out how to make
a good option for this, `--socket-table-id` or whatever for BSDs with FIBs,
call setfib(2) on it, decide how to deal with a server that binds to multiple
sockets at the same time - global setting, or per-socket table ID?).

What is totally missing today is a config option to do `ifconfig in fib`, this
could be something like a `--ifconfig-table <id>` option, again, for the BSDs
that have FIBs.

-- 
You are receiving this mail because:
You are the assignee for the bug.