search

OpenOverlayRouter / oor

OpenOverlayRouter is an implementation to create programmable overlay networks.
http://openoverlayrouter.org/
Apache License 2.0
123 stars 39 forks source link

Feature request: Data-Plane Confidentiality #14

Open renne opened 6 years ago

renne commented 6 years ago

Payload encryption makes LISP a highly flexible VPN solution with e.g. multi-homing, roaming, etc.

Please add support for IETF RFC 8061 to OpenOverlayRouter.

albert-lopez commented 6 years ago

Thanks for your suggestion, we strongly believe that security is a missing feature in OOR but we are not satisfied with LISP-CRYPTO, since it only offers confidentiality but not authentication (it uses a Diffie-Hellman key exchange through the MS), as such it is vulnerable against man-in-the-middle attacks compromising the confidentiality.

We are in the process of discussing this internally to see how to fix such issues and provide a fully-featured security solution, but this will take some time.

As always we are more than happy to welcome any community member willing to contribute