neocturne / fastd

Fast and Secure Tunnelling Daemon
Other
119 stars 16 forks source link

Add VXLAN backend #33

Open stevefan1999-personal opened 1 year ago

stevefan1999-personal commented 1 year ago

According to bridge https://man7.org/linux/man-pages/man8/bridge.8.html

We can try to do

ip link add <ifaceName> type vxlan \
  id <randomID> \
  dstport <bindPort> \
  local <listenAddr>
bridge fdb append 00:00:00:00:00:00 dev vxlan100 <peer1addr> port <peer1port>
bridge fdb append 00:00:00:00:00:00 dev vxlan100 dst <peer1addr> port <peer2port>

In fact I believe this is what Calico and Flannel does behind the scene

neocturne commented 1 year ago

Hmm, I assume you mean to use this for connections to multiple peers using a single VXLAN interface? Would MAC address learning be handled in the kernel? It is not clear to me from the docs that 00:00:00:00:00:00 can be passed like that.

In addition, there are some design decisions of fastd that are incompatible with VXLANs: