forked from DanielAdolfsson/ndppd
-
Notifications
You must be signed in to change notification settings - Fork 0
NDP Proxy Daemon
License
fansari/ndppd
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Folders and files
Name | Name | Last commit message | Last commit date | |
---|---|---|---|---|
Repository files navigation
ndppd - NDP Proxy Daemon Version 0.2.5 ------------------------------------------------------------------------ 1. Legal ------------------------------------------------------------------------ ndppd - NDP Proxy Daemon Copyright (C) 2011-2016 Daniel Adolfsson <daniel@priv.nu> This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see <http://www.gnu.org/licenses/>. ------------------------------------------------------------------------ 2. About 'ndppd' ------------------------------------------------------------------------ 'ndppd', or NDP Proxy Daemon, is a daemon that proxies NDP (Neighbor Discovery Protocol) messages between interfaces. The Neighbor Discovery Protocol (NDP) is a protocol in the Internet Protocol Suite used with Internet Protocol Version 6 (IPv6). It operates in the Link Layer of the Internet model (RFC 1122) and is responsible for address autoconfiguration of nodes, discovery of other nodes on the link, determining the Link Layer addresses of other nodes, duplicate address detection, finding available routers and Domain Name System (DNS) servers, address prefix discovery, and maintaining reachability information about the paths to other active neighbor nodes (RFC 4861). (Wikipedia) 'ndppd' currently only supports Neighbor Solicitation Messages and Neighbor Advertisement Messages. Before an IPv6 packet can be sent to a host, that host's link-layer address must first be discovered. This is done by sending a Neighbor Solicitation message containing the requested target IPv6 address to a specific multicast address. If a host have configured a matching IP, that host will then respond with a Neighbor Advertisement message, and provide it's link-layer address. Let's say you want to route some IPs to another interface, and your ISP isn't truly routing your subnet to your host. It means that your host will have respond to Neighbor Solicitation messages for IPs it haven't configured in order to be able to route them. Linux have a limited support for proxying Neighbor Solicitation messages by simply answering to any messages where the target IP can be found in the host's neighbor proxy table. To make this work you need to enable "proxy_ndp", and then add each single host to the neighbor proxy table by typing something like: ip -6 neigh add proxy <ip> dev <if> Unfortunately, it doesn't support listing proxies, and as I said, only individual IPs are supported. No subnets. 'ndppd' solves this by listening for Neighbor Solicitation messages on an interface, then query the internal interfaces for that target IP before finally sending a Neighbor Advertisement message. You can create rules to query one interface for one subnet, and another interface for another. 'ndppd' can even respond directly to Neighbor Solicitation messages without querying anything, should you need that. ------------------------------------------------------------------------ 3. Dependencies ------------------------------------------------------------------------ As of version 0.2.2, libconfuse is no longer needed. ------------------------------------------------------------------------ 4. Compiling ------------------------------------------------------------------------ First, make sure you have g++ and make installed. It should be as easy as: make all && make install If you want to enable debugging, you can type: make DEBUG=1 all Note that this version of the binary is much bigger, and the daemon produces a lot of messages. ------------------------------------------------------------------------ 5. Usage ------------------------------------------------------------------------ Read through 'ndppd.conf-dist' for guidelines and examples how to configure the daemon. Usage: ndppd [-d] [-c <config>] [-p <pidfile>] -p <pidfile> Create a pidfile at the specified location. -c <config> Read configuration from the specified location, instead of the default which is /etc/ndppd.conf. -d Daemonize the process, putting it in the background. Also enables syslogging. -v Increase logging verbosity. Can be used several times in order to increase even further. ------------------------------------------------------------------------ 5. Website and contact ------------------------------------------------------------------------ Contact : Daniel Adolfsson <daniel@priv.nu> Website : https://github.com/DanielAdolfsson/ndppd Git : git://github.com/DanielAdolfsson/ndppd.git If you want to report a bug, you can either send me a mail directly, or submit an issue on github.com.
About
NDP Proxy Daemon
Resources
License
Stars
Watchers
Forks
Packages 0
No packages published
Languages
- C++ 79.5%
- C 15.2%
- Roff 4.1%
- Makefile 1.2%