[Cerowrt-devel] Updates to the wiki for 3.10.32-12
dave.taht at gmail.com
Mon Mar 24 13:38:21 EDT 2014
BTW: how are you selecting the different gui?
On Mon, Mar 24, 2014 at 9:32 AM, Rich Brown <richb.hanover at gmail.com> wrote:
> I updated the wiki to incorporate features of 3.10.32-12.
> - The SQM page has been updated to include current screen shots and describe the options. A question: what are the units for the Hard Limit on ingress/egress?
Usually packets, unless you are using the undocumented bfifo qdisc option.
> - The Release Notes page has been updated to mention DNSSEC and BCP38. I'm still not clear whether DNSSEC is turned on/operational by default. What should that page say?
It's on by default, however, we MUST decide on some 100% robust method
for getting time on boot
before the stable release.
Otherwise boxes that sit for a while before being turned on (consider
boxes shipped on a boat
from china) or those that can't get ntp at all will be locked out.
I am enjoying the flood of ideas on this topic going by on another
thread. (it would be good
to broaden the thread to relevant ntp, dnssec mailing lists)
> - I have added a BCP38 page to give an overview of that page. A question that I haven't seen addressed in the commentary on the list: Does this BCP38 implement also filter out spoofed source addresses? (I imagine it would, but the pages don't specifically say so.)
Depends on your definition of "spoof".
1) For example a babel node with a real IP inside of a natted network
would still be accepted (and natted) on egress. Can't solve everything...
2) The implementation is capable of filtering out or accepting a large
number of networks, as per bcp38. The default is basically the best
that can be done for a home/natted network.
Given that this is intended to give a cluebat, showing an example for
a provider with a real network would be useful...
> Although I try to write carefully, sometimes I'm just makin' stuff up. Comments requested. Thanks.
> Cerowrt-devel mailing list
> Cerowrt-devel at lists.bufferbloat.net
Fixing bufferbloat with cerowrt: http://www.teklibre.com/cerowrt/subscribe.html
More information about the Cerowrt-devel