UDP checksums and inband control messages

2018-02-19 Thread Derek Fawcus
I see from the code that currently the kernel UDP sockets have checksums enabled. I also note the message from November speculating upon if in band control messages should be added. One thing I was pondering recently in the context of UDP tunnelling, is that one doesn't really need to have UDP

Question about SPDX marking on some crypto files

2018-02-19 Thread Derek Fawcus
Hello, having just learnt of this product, I started poking through the source; when I got to some of the crypto code I noticed something curious, and did a bit more research. I'm curious about the SPDX licence marking on the crypto source files which seem to be autogenerated, specifically

Re: Fragmentation on UDP layer possible?

2018-08-14 Thread Derek Fawcus
UDP may (eventually) get a native segmentation capability, but the work is still under discussion, and possibly subject to change. See the FRAG option within draft-ietf-tsvwg-udp-options (https://tools.ietf.org/html/draft-ietf-tsvwg-udp-options-05) DF

Re: PMTU Discovery Security Concerns

2018-04-20 Thread Derek Fawcus
On Mon, Apr 16, 2018 at 07:23:29AM +0200, Jason A. Donenfeld wrote: > > See RFC4821, RFC8085 and > > https://tools.ietf.org/html/draft-ietf-tsvwg-datagram-plpmtud-01 > > for more info about PLMTUD. > > > >

Re: Interest in adding multicast support to Wireguard?

2020-09-27 Thread Derek Fawcus
Various routers have support for running PIM (and IGMP/MLD) in NBMA mode, whereby individual hosts and joins/leave for such are tracked, rather than depend upon a shared broadcast medium. This is used for mcast over Frame Relay, ATM, etc which are inherently NBMA. ISTM that wg should also be

Re: potentially disallowing IP fragmentation on wg packets, and handling routing loops better

2021-06-07 Thread Derek Fawcus
On Sun, Jun 06, 2021 at 01:14:16PM +0200, Peter Linder wrote: > This would break things for me. We're doing a lot of L2 over L3 site to > site stuff and we are using wireguard as the outer layer. Inner layer is > vxlan or l2tpv3. > > In particular, people connect lots of stuff with no regard for