NAME¶

libvdeplug_agno - vdeplug module: add encryption to ethernet link plug

SYNOPSIS¶

libvdeplug_agno.so

DESCRIPTION¶

This is a libvdeplug cryptographic module that implements agnostic encryption over layer 2. Agnostic encryption is an encryption method that doesn't need information about the vde network implementation.

This module of libvdeplug4 can be used in any program supporting vde like vde_plug, vdens, kvm, qemu, user-mode-linux and virtualbox.

The vde_plug_url syntax of this module is the following:

      agno://[/path/of/keyfile][[OPTIONS]]{vde nested url}

/path/of/keyfile, if present, must be an absolute path or a path relative to the user's home (e.g. ~/example/path). If omitted the default path of the keyfile is ~/.vde_agno_key. The keyfile must contain a 128-bit key in hexadecimal format. Only hexadecimal characters are considered in both uppercase and lowercase, all the others are ignored (e.g. white-spaces, newline characters, non-hexadecimal letters).

OPTIONS¶

ethtype=TYPE

define the type of the Ethernet frame of the encrypted packet. TYPE can be the an exadecimal number or:

copy: same type of the non-encrypted packet

ipv4: ipv4 type (0x0800)

ipv6: ipv6 type (0x86dd)

rand: random number as type. The random number will be generated for every Ethernet packet sent.

EXAMPLES¶

agno://{vde:///tmp/myswitch}

agno uses the key stored in the default keyfile (~/.vde_agno_key) location to encrypt the traffic sent to the switch. The Ethernet frames have agno specific type (0xa6de) as type.

agno:///tmp/my_keyfile[ethtype=copy]{vde:///tmp/myswitch}

agno uses the key stored in file /tmp/my_keyfile to encrypt the traffic sent to the switch. The Ethernet frames will have the same type of the non-encrypted packet.

vdens agno://[ethtype=rand]{vxvde://234.0.0.1}

create a nanespace connected to a vxvde local area cloud. agno uses the key stored in the default keyfile (~/.vde_agno_key) location to encrypt the traffic sent to vxvde.

NOTICE¶

Virtual Distributed Ethernet is not related in any way with www.vde.com ("Verband der Elektrotechnik, Elektronik und Informationstechnik" i.e. the German "Association for Electrical, Electronic & Information Technologies").

SEE ALSO¶

vde_plug(1)

AUTHOR¶

VirtualSquare. Project leader: Renzo Davoli