Re: new in-kernel wireguard and IPv6 endpoint

2021-02-03 Thread Vasily Postnicov
May be. I have nothing to suggest, sorry. I never used IPv6 in real life. чт, 4 февр. 2021 г., 10:44 Marek Zarychta : > W dniu 04.02.2021 o 05:25, Vasily Postnicov pisze: > > If the endpoint does not use the same WireGuard implementation from > FreeBSD, try to cherry-pick this comm

Re: new in-kernel wireguard and IPv6 endpoint

2021-02-03 Thread Vasily Postnicov
If the endpoint does not use the same WireGuard implementation from FreeBSD, try to cherry-pick this commit first and then rebuild and reinstall the kernel. https://cgit.freebsd.org/src/commit/?id=5aaea4b99e5cc724e97e24a68876e8768d3d8012 ср, 3 февр. 2021 г., 23:13 Marek Zarychta : > W dniu 21.01

Re: wireguard if_wg manual page is missing? How to use?

2021-01-25 Thread Vasily Postnicov
Hello. I discovered that public key derivation in if_wg is not working properly. You will need to apply the following patch: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=252894 and reinstall the kernel (I tested it with Mullvad VPN). Then you must create WireGuard interface like so: ifconfig

Re: New WireGuard kernel module does not work with mullvad VPN

2021-01-21 Thread Vasily Postnicov
public key is izjBq6I7GRVaNOvO… I delete this key from my account now) wireguard-go always displays the correct public key (corresponding with what mullvad thinks) чт, 21 янв. 2021 г. в 18:38, Vasily Postnicov : > > Hello. I try the new module and it does not seem to work for me. I use >

New WireGuard kernel module does not work with mullvad VPN

2021-01-21 Thread Vasily Postnicov
Hello. I try the new module and it does not seem to work for me. I use mullvad VPN and wireguard-go but want to replace wireguard-go with kernelspace implementation. A have the following configuration: [Interface] PrivateKey = Address = 10.66.116.246/32,fc00:::bb01::3:74f5/128 DNS = 193.1

Re: DNS using Name Service Switch module and Casper

2021-01-10 Thread Vasily Postnicov
:25:46PM +0300, Vasily Postnicov wrote: > > Brilliant! It took me almost a day to dive into ZeroMQ to reassure > > myself that there is nothing wrong with it. When I tried to write > > minimal test programs which call fork after pthread_create() in all > > combinations. Wh

Re: DNS using Name Service Switch module and Casper

2021-01-09 Thread Vasily Postnicov
Oh, I almost forgot. I am on f2b794e now сб, 9 янв. 2021 г. в 20:25, Vasily Postnicov : > > Brilliant! It took me almost a day to dive into ZeroMQ to reassure > myself that there is nothing wrong with it. When I tried to write > minimal test programs which call fork after pthread_cre

Re: DNS using Name Service Switch module and Casper

2021-01-09 Thread Vasily Postnicov
ohnston : > > On Sat, Jan 09, 2021 at 04:16:49PM +0300, Vasily Postnicov wrote: > > Turns out, if you do not specify either -4 or -6 to ping, unsandboxed > > getaddrinfo() will be called in /usr/src/sbin/ping/main.c, line 139. > > (what's the point in sandboxing then, lo

Re: DNS using Name Service Switch module and Casper

2021-01-09 Thread Vasily Postnicov
https://photos.app.goo.gl/T1B3Fo1hg6z7r3vZ6 Oh yes, my module works if you specify -4 to ping command. пт, 8 янв. 2021 г. в 20:58, Vasily Postnicov : > > Nevermind my last question. ZeroMQ is written on C++. Here is shown how you > can execute everything with almost empty main. > > https

Re: DNS using Name Service Switch module and Casper

2021-01-08 Thread Vasily Postnicov
., 20:17 Vasily Postnicov : > I have noticed that after I kill stuck ping, the process spawned with > cap_init() remains. I cannot even kill it with SIGKILL. This is the > output of procstat on such a process. > > > vasily 969 0.0 0.1 26428 6532 v0 I22:

Re: DNS using Name Service Switch module and Casper

2021-01-08 Thread Vasily Postnicov
021 at 07:08:14PM +0300, Vasily Postnicov wrote: > > That's what I found. > > > > At first, ping calls cap_init() in capdns_setup(). cap_init() forks a > > process, then the parent returns and the child calls casper_main_loop(). > > The child and the

Re: DNS using Name Service Switch module and Casper

2021-01-06 Thread Vasily Postnicov
rintf()'s. LLDB refuses to run ping with 'error: Child exec failed'. вт, 5 янв. 2021 г. в 17:43, Mark Johnston : > On Tue, Jan 05, 2021 at 10:02:37AM +0300, Vasily Postnicov wrote: > > Hello. I wrote a simple daemon called ZeroDNS which provides > functionality > &g

DNS using Name Service Switch module and Casper

2021-01-04 Thread Vasily Postnicov
Hello. I wrote a simple daemon called ZeroDNS which provides functionality similar to multicast DNS, namely it discovers other participating machines over the LAN and stores their hostname and IPv4 address pairs. Here is a NSS module which allows the system to use information from that daemon: htt