Things to do on the MetaNet

Sort out OSPF

We have people leaking routes onto the network that aren't supposed to be there, we have people who don't get routes to/from the network, and occasionally get partitioning. Someone writing a OSPF HOWTO would be great.

• Investigate why ospf (not zebra) sometimes dies, maybe if Etud is killed ospfd will die ?

The version of OSPF we run has known issues with crashing on startup if you have ipalias'd interfaces, and crashing occasionally on interface up/down. These are already fixed in OSPF.

Why not implement RouterAuthentication? for OSPF? - LindsayDruett

Drop OSPF completely and use BGP instead

BGP is working well - LindsayDruett

The import thing is making sure filters are set up so that only the proper routes are propogated.
The way we did it was to implement prefix-lists which both work on zebra ZebOS and Cisco IOS.

Implement DNSSEC

We need this for secure DNS resolution and key distribution

Implement IPSec

To provide authentication and security over the MetaNet, particularly oppertunistic IPSec requires DNSSEC

IPv6 Support

Configure IPv6 to run over the MetaNet and perhaps investigate obtaining some (real!) IPv6 addresses from somewhere

Things to do with the MetaNet code

• Release REL2
• Configure/build
• BSD port

• Tidy ups:

  • Licensing/CVS tags in all the files

• Initscripts

  • Init scripts are "complete" for debian. Need some Redhat style ones.

Ethernet-Over-UDP

• Renaming the program (FOAD'')
• IPv6?
• Default log level option in config / command line. Should be applied to all modules unless overridden by a specific level for that module

You can name it FOAD if you want; I'd recommend something a bit more descriptive perhaps

WANd

• re-design and re-write (see MetaNetDesign)
• Signed updates
• Use logging stuff

Any chance of a port to freebsd? - zcat That would be the "BSD port" mentioned above. If you give me a shell on your box I'll give it a go.