zx2c4
/
wireguard-freebsd
mirror of git://git.zx2c4.com/wireguard-freebsd
1
Fork 0
Code Releases Activity
wireguard-freebsd/TODO.md

25 lines
1.1 KiB
Markdown
Raw Permalink Normal View History

if_wg: count on peers always having a remote We do a pretty nasty hack in the allowedips selftest to avoid having to allocate more memory. Seems to work. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2021-04-24 18:51:12 +02:00
### Primary TODO
TODO: initial dump Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2021-03-27 03:03:28 +01:00
- Finish porting [this script](https://git.zx2c4.com/wireguard-linux/tree/tools/testing/selftests/wireguard/netns.sh)
to `./tests/netns.sh` using vnets and epairs.
- Shore up vnet support and races/locking around moving between vnets.
- Work out `priv_check` from vnet perspective. (There's no `ns_capable()` on
FreeBSD, just `capable()`, which makes it a bit weird for one jail to have
permissions in another.)
- Make code style consistent with one FreeBSD way, rather than a mix of styles.
if_wg: do not increment error counter when sc is null If sc is null, jumping to increment the counter means crash. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2021-04-25 16:45:39 +02:00
- Review all included headers, and minimize a bit.
- Figure out clear locking rules for network stack stuff -- when different
if_wg: handle if_transmit and if_output properly The netmap code goes directly to if_transmit, which means it'll bypass if_output, in which case, there's no packet allocated. Also, we're relying on if_output's sockaddr structure to be legit, but who knows what types of userspace hijynxes can forge this. Rather than relying on that kind of black magic, determine the AF from the actual packet contents. But still insist that it agrees with the sockaddr. The extraction of the type from AF_UNSPEC follows the same pattern as if_gif and if_gre. We also use this as an opportunity to send icmp error messages in the right place. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2021-04-26 01:55:12 +02:00
functions run under what locks and what they race with.
TODO: initial dump Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2021-03-27 03:03:28 +01:00
### Crypto TODO
if_wg: count on peers always having a remote We do a pretty nasty hack in the allowedips selftest to avoid having to allocate more memory. Seems to work. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2021-04-24 18:51:12 +02:00
- Do packet encryption using opencrypto/ with sg lists on the mbuf.
TODO: initial dump Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2021-03-27 03:03:28 +01:00
- Send 25519 upstream to sys/crypto, and port to it.
- Send simple chapoly upstream to sys/crypto, and port to it.
- Port to sys/crypto's blake2s implementation.
### Tooling TODO
- Relicense wg(8) as MIT and integrate into upstream build system.
- Examine possibility of a non-bash wg-quick(8) for sending upstream.