Skip to content

Commit 630c56c

Browse files
committed
examples/inet/ipsec: IPv6 multicast BYPASS config + fingerprint
Add [Config Multicast6] to ipv6.ini: a UDP stream to an IPv6 global-scope multicast group (ff0e::8). IPsec lets it pass unprotected -- the egress hook short-circuits to BYPASS on a multicast destination (getRemoteAddress() .isMulticast()) before any SPD lookup -- and it is delivered end to end to the joined UdpSink. Records the tplx;~tNl fingerprint (6/6 ipsec rows pass).
1 parent a067442 commit 630c56c

2 files changed

Lines changed: 20 additions & 0 deletions

File tree

examples/inet/ipsec/ipv6.ini

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -75,3 +75,22 @@ sim-time-limit = 200s
7575
**.server*.app[2].localPort = 2002
7676
**.server*.app[0].echoFactor = 2.0
7777
**.server*.app[0].echoDelay = 0s
78+
79+
[Config Multicast6]
80+
extends = UDPTraffic6
81+
description = "IPsec over IPv6 with multicast traffic (just BYPASS'd)"
82+
sim-time-limit = 200s
83+
84+
# single extra UDP stream to an IPv6 (global-scope) multicast group; IPsec must let it
85+
# pass unprotected -- the egress hook short-circuits to BYPASS on a multicast destination
86+
# (getRemoteAddress().isMulticast()), before any SPD lookup
87+
**.multicastForwarding = true
88+
89+
**.numApps = 1
90+
**.client1.app[0].typename = "UdpBasicApp"
91+
**.client1.app[0].destAddresses = "ff0e::8"
92+
**.client1.app[0].destPort = 2100
93+
94+
**.server*.app[0].typename = "UdpSink"
95+
**.server*.app[0].localPort = 2100
96+
**.server*.app[0].multicastGroup = "ff0e::8"

tests/fingerprint/examples.csv

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -175,6 +175,7 @@
175175
/examples/inet/ipsec/, -f omnetpp.ini -c Multicast -r 0, 200s, e53d-f92e/tplx;6ac3-ef6b/~tNl, PASS, IPSec
176176
/examples/inet/ipsec/, -f ipv6.ini -c UDPTraffic6 -r 0, 200s, bac2-fae6/tplx;d5ee-ccc0/~tNl, PASS, IPSec
177177
/examples/inet/ipsec/, -f ipv6.ini -c TCPTraffic6 -r 0, 200s, 50b3-6ddd/tplx;c410-879b/~tNl, PASS, IPSec
178+
/examples/inet/ipsec/, -f ipv6.ini -c Multicast6 -r 0, 200s, e6f7-0820/tplx;1222-ffd8/~tNl, PASS, IPSec
178179

179180
/examples/inet/ipv4hook/, -f omnetpp.ini -c General -r 0, 100s, 1afb-5eeb/tplx;3df8-bb36/~tNl;2891-5a4e/~tND;48e1-2966/tyf, PASS, EthernetMac Ipv4
180181

0 commit comments

Comments
 (0)