blob: 64017cac28086e30f5053d541cd52ad1d27cb5a5 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
|
TODOs for KAME/OpenBSD
Jun-ichiro Hagino, KAME project
KAME Id: TODO,v 1.32 1999/12/08 05:49:27 itojun Exp
$OpenBSD: TODO,v 1.4 1999/12/21 01:34:16 itojun Exp $
Please refrain from making too much changes to sys/netinet6 tree (even if
cosmetic), as we (KAME team) shares these code in all KAME/*BSD. If you
keep the tree untouched, that will help us upgrade to more recent KAME tree.
Things we can do with the current code:
- ip6 layer
ip6 output, ip6 input
- icmp6 layer
replies to ping, DAD
- raw6 socket input/output
- tcp6 socket input/output (both daemon and client)
- udp6 socket input/output (need more testing)
- "options IPSEC" compiles (enabled by default in sys/conf/files), but
it means OpenBSD IPsec for IPv4 only. Efforts are ongoing to support IPv6
with OpenBSD IPsec.
- hoplimit control advapi works fine.
- works just fine on i386 and sparc.
Things we can't do with the current code:
- setsockopt(), ioctl and advapi needs checking
- check advanced APIs (both userland and kernel)
- multicast related items need checking
- ip6_output() does not consult /128 routes, and will not obey icmp6 redir.
- ssh6 port does not work on sparc (ssh does not work. sshd works fine - why?)
Cleanup todo:
- organize kame/sys/netinet6/in6_src.c and kame/sys/netinet6/in6_pcb.c better
for maximum code sharing.
- nuke unnecessary #ifdef in NRL tcp/udp layer, for more readability
(is it okay to do it?)
- security auditing :-)
- when both INET and INET6 listening sockets are available, route IPv4
connection to INET socket (instead of INET6 socket with using mapped addr).
|
