Date: Fri, 5 Jun 2020 21:13:09 +0200 From: Tom Marcoen <tom.marcoen@gmail.com> To: freebsd-net@freebsd.org, eugen@grosbein.net Subject: Re: On Netgraph Message-ID: <CAJ-iVrNLtokv1abMWht=B1CZKxOC_Q=EvOh_hs%2BS3b%2Bd4F5RMA@mail.gmail.com> In-Reply-To: <CAJ-iVrNn=9-Z5YHG4j=adnFiiTbDLED6ArYh8j9Zepn0k8=6KA@mail.gmail.com> References: <CAJ-iVrNn=9-Z5YHG4j=adnFiiTbDLED6ArYh8j9Zepn0k8=6KA@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Hey Eugen, For some reason I did not receive your email. But I found your reply in the archives. Anyway, the goal is to have two computers, each with a Netgraph bridge node and jails connecting to these bridges. I want to connect both bridges over the Internet securely. Using a UDP tunnel and encrypting that with IPsec or wireguard or .... would be an option, but it would be nicer if I could use a Netgraph-native option. Regards, Tom On Wed, 27 May 2020 at 10:06, Tom Marcoen <tom.marcoen@gmail.com> wrote: > Hey all, > > I'm new to this mailing list and also quite new to FreeBSD (huray, welcome > to me!) so bare with me, please. > > I'm reading up on Netgraph on how I can integrate it with FreeBSD jails > and I was looking at some of the examples provided in > /usr/share/examples/netgraph and now have the following question. > The udp.tunnel example shows an iface point-to-point connection but it is > unencrypted. Of course I could encrypt it with an IPsec tunnel on the host > or tunnel it through SSH, but I was wondering whether there exists a nice > Netgraph solution, e.g. a node with two hooks, receiving unencrypted > traffic on the inside hook and sending out encrypted traffic on the outside > hook. > > Regards, > Tom >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAJ-iVrNLtokv1abMWht=B1CZKxOC_Q=EvOh_hs%2BS3b%2Bd4F5RMA>