Re: Tunnel interfaces and vnet boundary crossing

2022-08-23 Thread Milan Obuch
On Tue, 23 Aug 2022 18:06:59 + tt78347 wrote: > --- Original Message --- > On Tuesday, August 23rd, 2022 at 3:58 PM, Milan Obuch > wrote: [ snip ] > > > There is an additional vnet jail which handles ipsec; the ipsec > > > jail connects the host's jail network (usually a /24) to ot

Re: Tunnel interfaces and vnet boundary crossing

2022-08-23 Thread tt78347
--- Original Message --- On Tuesday, August 23rd, 2022 at 3:58 PM, Milan Obuch wrote: > On Tue, 23 Aug 2022 15:06:00 + > tt78347 tt78...@protonmail.com wrote: > > > Hello. This is my first email to this mailing list, so I hope it has > > been sent and formatted correctly. > >

Re: Tunnel interfaces and vnet boundary crossing

2022-08-23 Thread Milan Obuch
On Tue, 23 Aug 2022 15:06:00 + tt78347 wrote: > Hello. This is my first email to this mailing list, so I hope it has > been sent and formatted correctly. Well, top posting is being frowned upon a bit on mailing list, which has its racio, otherwise I think everything is fine :) > Regarding t

Re: Tunnel interfaces and vnet boundary crossing

2022-08-23 Thread tt78347
Hello. This is my first email to this mailing list, so I hope it has been sent and formatted correctly. Regarding tun interfaces, I do something similar to M. Gmelin, however, I create the tunnel (tun, for openvpn) within the vnet jail. I think your question is not about tun interfaces but abou

Re: Tunnel interfaces and vnet boundary crossing

2022-08-17 Thread Milan Obuch
On Wed, 17 Aug 2022 22:22:45 +0200 Michael Gmelin wrote: > > On 15. Aug 2022, at 08:52, Milan Obuch wrote: > > > > Hi, > > > > some time ago I managed to design and implement multi-tenant OpenVPN > > server using vnet jails. This way I am able to use more OpenVPN > > instances on single publi

Re: Tunnel interfaces and vnet boundary crossing

2022-08-17 Thread Milan Obuch
On Wed, 17 Aug 2022 13:12:14 -0700 John-Mark Gurney wrote: > Milan Obuch wrote this message on Mon, Aug 15, 2022 at 08:53 +0200: > > I tried to mimic this in FreeBSD with following commands: > > > > ifconfig gre1 create tunnel 172.16.1.1 172.16.0.1 vnet ov1 > > jexec ov1 ifconfig gre1 10.1.0.2/3

Re: Tunnel interfaces and vnet boundary crossing

2022-08-17 Thread Michael Gmelin
> On 15. Aug 2022, at 08:52, Milan Obuch wrote: > > Hi, > > some time ago I managed to design and implement multi-tenant OpenVPN > server using vnet jails. This way I am able to use more OpenVPN > instances on single public IP. > > This is made possible using tun/tap interface property allo

Re: Tunnel interfaces and vnet boundary crossing

2022-08-17 Thread John-Mark Gurney
Milan Obuch wrote this message on Mon, Aug 15, 2022 at 08:53 +0200: > I tried to mimic this in FreeBSD with following commands: > > ifconfig gre1 create tunnel 172.16.1.1 172.16.0.1 vnet ov1 > jexec ov1 ifconfig gre1 10.1.0.2/30 10.1.0.1 > > This does not work. I found some older post which made