BSD razvojniki opažajo interes nekaterih uporabnikov njihovega operacijskega sistema, da bi poganjali server v IPv6-only načinu in ne kakor sedaj, ko je po defaultu dual-stack in se ga ne da zgraditi iz izvorne kode kot IPv6-only…

To bo pomenilo, da iz operacijskega sistema vržemo ven vse elemente IPv4 in s tem še izboljšamo varnost samega operacijskega sistema, saj potencialni napadalec ne bo mogel izkoristiti lukenj IPv4 orodij in ne bo mogel postavljati IPv4 povezav naprej iz našega serverja, v primeru da ga bo kompromitiral.

Jan Žorž

Vir: sharanet.org

INET-less / IPv6-only kernel
Status: under development, mostly works
Will appear in 8.0: probably not
Authors: Bjoern Zeeb and others
Web: mailing list announcement

As IPv6 development and deployment is progressing, at its 
own pace, there is interest in making it possible to run a 
FreeBSD system as IPv6-only (instead of the default 
configuration which is dual-hosted IPv4+IPv6).

Historically, BSD is the progenitor of all TCP/IP 
implementations and the IPv4 code in FreeBSD was 
sprawled across the network layers of the kernel,  
from device drivers to the higher socket layers. 
A recent initiative aims at fixing the layering violations 
in preparation to, at first, build a kernel without INET 
(i.e. IPv4) support, then build an IPv6-only kernel. This 
change involves large kernel subsystems such as the 
firewalls, bridging, NFS and others.
_

Vaš IP naslov (ali ste na IPv6 ?):
3.14.253.152

Comments(0)