[Bug 278295] security/openvpn{,devel}: Add FIB support for ifconfig(8)

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=278295

--- Comment #18 from Marius Strobl <[email protected]> ---
(In reply to Gert Doering from comment #16)
"no real objection from Gert either" comes from you writing "I'm not exactly
enthusiastic", which for me is vastly different from not approving.

The use case is routing the traffic of applications not in the default FIB
through the VPN tunnel and only letting OpenVPN alter the routing table
accordingly in that particular non-default FIB, by starting OpenVPN via
openvpn_fib="N", i. e. analogous to the other applications in FIB N.
I don't think that this scenario is niche.

setfib.1 reads:
"execute a utility with an altered default network view" and
"The setfib utility runs another utility with a different routing table."
What you are referring to is the example in setfib.1 of one of the things
setfib(1) does. However, everyone actually using FIBs is aware that setfib(1)
isn't fixed/limited to specifying only the FIB for sockets, but as the man
page actually says "execute a utility with an altered default network view"
with netstat(1) and route(8) being the most prominent examples.

-- 
You are receiving this mail because:
You are the assignee for the bug.