Rémi Denis-Courmont <[EMAIL PROTECTED]> wrote on 06/23/2007 09:51:55
AM:
> How do I authenticate SeND RA? How do I deal with the link going down
> before the expiration? How do I know "this" interface is doing autoconf
> at all?
The kernel should do the authentication, as it will for other
RA's,
and should not deliver (IMAO) unauthenticated packets. If it is, I would
consider that a bug (for all cases, not just this), and that would be a
good thing to fix. :-)
An interface going down doesn't directly invalidate a DNS server
address, though it may not be the best through another interface. Since
it is a list, I think "doing nothing" for this case wouldn't be terrible.
This is no worse than the existing resolver code. But if you really need
it,
you can monitor netlink, or poll the interface flags on whatever interval
you
require for detection.
As for autoconf, that's available from sysctl, I assume from /proc
somewhere, too. That usually doesn't change, but if you want to account
for runtime configuration changes, you can always monitor netlink and
reread when new addresses appear, too.
There certainly may be complications I haven't thought of, since
I haven't implemented it. But I still don't see a good case for using the
kernel as a DNS database.
+-DLS
-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at http://vger.kernel.org/majordomo-info.html
