Zhenghui Xie wrote:
>>> The current network/initial will disappear as well, but its current
>>> tasks
>>> will be replaced by 3 services:
>>> 1. Configuring IPsec related stuff will be replaced by IPsec service(s);
>>> details in Sun Bug ID 6185380.
>>> http://bugs.opensolaris.org/bugdatabase/view_bug.do?bug_id=6185380
>>> 2. Configuring IPv4 and/or IPv6 tunneling will be replaced by a
>>> Clearview
>>> tunneling service; details at Section 10 of IP tunneling design
>>> document:
>>> http://www.opensolaris.org/os/project/clearview/iptun-design.pdf
>>
>>
>> So how does NWAM work with the above services? Is there a
>> dependency between the proposed network/profiled and the above
>> services? I believe this should be clearly stated.
>>
>>
>>
> good question. It was not specified clearly in the draft. I think they
> should depend on milestone/network instead and should be enabled by NWAM
> daemon when the daemon is in IF_RUNNING state.
I am not sure if this is the case. For example, I believe there
is no technical problem to have some IPsec policies set up before
there is any external connectivity. In fact, one may want to do
exactly this so that the policies are enforced right from the
beginning. I'd suggest you to talk to the IPsec team for their
opinion.
Could Seb please comment on the IP tunnel service? I guess tunnel
links can only be setup after there is network connectivity. So
it makes sense to have the tunnel service dependent on milestone/
network.
> Not all the services will depend on network/profiled. In fact, the
> previous dependencies that depend on the deleted network services will
> be gone. And NWAM daemon will leverage the enhanced SMF profile project
> to enbale these services at appropriate time.
It is unclear to me how the above works. Just assume that there
is a service L which depends on network/loopback. Using the
above suggestion, does it mean that if L is enabled (manually by
a sys admin), L can be now started even before NWAM has setup the
loopback interface?
> I think maybe a figure of
> the new dependencies will help. I will try to draw one in the final draft.
Yes, a figure of the dependencies will help.
--
K. Poon.
kacheong.poon at sun.com
