Volker Rümelin
2016-11-13 12:34:54 UTC
Hi strongswan developers,
I wrote a plugin to manage NDP and ARP proxy entries in the kernel
neighbour table. It's a feature that was also requested in issue #1008,
https://wiki.strongswan.org/issues/1008. Proxy ARP is disabled by
default, so it doesn't break systems with farp plugin loaded.
It received some light testing on my system. With option
--enable-monolithic it was only compile tested.
At the moment the plugin is linked against kernel_netlink_shared.lo,
because that way it builds without warnings. I would have preferred to
link the plugin against libstrongswan-kernel-netlink.la, but libtool
warns this is not portable.
I wonder if this is material for inclusion in the strongswan repository.
Suggestions and other feedback are always welcome.
With best regards,
Volker
I wrote a plugin to manage NDP and ARP proxy entries in the kernel
neighbour table. It's a feature that was also requested in issue #1008,
https://wiki.strongswan.org/issues/1008. Proxy ARP is disabled by
default, so it doesn't break systems with farp plugin loaded.
It received some light testing on my system. With option
--enable-monolithic it was only compile tested.
At the moment the plugin is linked against kernel_netlink_shared.lo,
because that way it builds without warnings. I would have preferred to
link the plugin against libstrongswan-kernel-netlink.la, but libtool
warns this is not portable.
I wonder if this is material for inclusion in the strongswan repository.
Suggestions and other feedback are always welcome.
With best regards,
Volker