On Mon, Mar 28, 2016 at 10:43:39PM +0800, Marek Lindner wrote:
> Can you provide insights  as to what that means and whether or not
> tinc/fastd 'export' their internal state via an interface flag or
> something along those lines ?

Oh, that's a cool idea! Similar to the flag "MULTICAST" you can
see via an "ip link", to have a flag like "TRANSITIVE", for instance,
right? (and a net_device flag, configurable via ioctl if I don't
mix up the internals)

mac80211 could unset it by default for adhoc interfaces or if
ap-isolation is enabled. tinc, fastd or OpenVPN could set or unset
it on their interfaces depending on their specific configuration.
ethernet drivers would have it enabled by default. For bridges
some more thought might be needed, what to inherit from the bridge
slaves on the upper bridge interface.

Safe and transparent for the user. I like that idea :).

Reply via email to