-
Notifications
You must be signed in to change notification settings - Fork 294
Introduce VSOCK link type #1223
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: develop
Are you sure you want to change the base?
Conversation
This address family is used in communication between virtual machines and their hosts. Advantages include that no virtual ethernet adapter and their respective address configuration and routing need to be setup. Rather, with this new link type, only a single yggdrasil interface can exist inside of the virtual machine. It can also be used inside of containers. There, the advantage over existing link types like unix sockets include, that no mount point need to be shared with the host and container. This provides more isolation. More information: https://man7.org/linux/man-pages/man7/vsock.7.html https://gist.github.com/nrdmn/7971be650919b112343b1cb2757a3fe6
|
At the moment I am reluctant to add more link types, as I'd actually rather remove quite a few of the link types in v0.6. I'm not really convinced that QUIC, WebSockets or SOCKS have overwhelmingly good reasons to stay either, given they mostly just encourage people to do silly things topology-wise. |
|
Would you be open to external link types for example via a plugin system? For example if you would have an executable program in
Of course you would know more about these topology problems than I do, but I want to say that people sometimes rely on these exotic transports to bypass firewalls. |
Most people do not even know what yggdrasil is. They have never heard of something called a "flat routing scheme". It is quite fair for those who are not so familiar with the mechanism of yggdrasil to take stupid moves, but features are always useful to those who know it, and need it. :) |
This address family is used in communication between virtual machines and their hosts. Advantages include that no virtual ethernet adapter and their respective address configuration and routing need to be setup. Rather, with this new link type, only a single yggdrasil interface can exist inside of the virtual machine.
It can also be used inside of containers. There, the advantage over existing link types like unix sockets include, that no mount point need to be shared with the host and container. This provides more isolation.
More information:
https://man7.org/linux/man-pages/man7/vsock.7.html
https://gist.github.com/nrdmn/7971be650919b112343b1cb2757a3fe6