Skip to content

Comments

Add ability to Whitelist Prefixes#9

Open
blocktrron wants to merge 5 commits intonjh:mainfrom
blocktrron:prefix-whitelisting
Open

Add ability to Whitelist Prefixes#9
blocktrron wants to merge 5 commits intonjh:mainfrom
blocktrron:prefix-whitelisting

Conversation

@blocktrron
Copy link

This pull request adds the ability to whitelist a certain subnet from which Router Advertisements are accepted from.

Motivation

In networks where local and global unicast prefixes are announced it is not predictable, which one is picked by EtherSia to generate its IPv6 address.
With this PR, it is possible to whitelist the global unicast address space, so EtherSia generates a globally routable IPv6 Address.

@blocktrron blocktrron changed the title Add function to Whitelist Prefixes Add ability to Whitelist Prefixes Sep 26, 2017
@njh
Copy link
Owner

njh commented Oct 28, 2017

Hi @blocktrron,

Sorry for taking over a month to respond to this PR.

Can you give a bit more background about this? I don't think I have seen anything like this in other IPv6 stacks. By plugging into a LAN don't you implicitly have to trust the network? If you don't trust the Router Advertisements on the network, is an option to set the address statically instead?

I guess my main concern is that this PR increases the memory usage for everyone, but I am not sure that many people will need/use it.

nick.

@blocktrron
Copy link
Author

Hello Nick,

this PR is not primarily about trusting specific RA's. In Networks, where an ULA and a globally Routed Prefix is advertised, EtherSia might pick an undesired prefix.

We have this specific problem in a Mesh network, where the ULA Prefix is advertised by each mesh-node, while the globally routed Prefix is only advertised by nodes bordering to the internet. The globally routed prefix is usually not the first received. We want EtherSia to reliably acquire a globally routed Prefix. 😺

At least here in Germany, many CPEs from ISPs also advertise a globally routed and a ULA prefix.

  • blocktrron

Base automatically changed from master to main January 23, 2021 00:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants