libvdeplug_agno - vdeplug module: add encryption to ethernet link plug

Author

       VirtualSquare. Project leader: Renzo Davoli

VirtualSquare                                     November 2020                               LIBVDEPLUG_AGNO(1)

Description

       This  is  a  libvdeplug  cryptographic  module that implements agnostic encryption over layer 2. Agnostic
       encryption is an encryption method that doesn't need information about the vde network implementation.

       This module of libvdeplug4 can be used in any program supporting vde like  vde_plug,  vdens,  kvm,  qemu,
       user-mode-linux and virtualbox.

       The vde_plug_url syntax of this module is the following:

             agno://[/path/of/keyfile][[OPTIONS]]{vdenestedurl}/path/of/keyfile,  if  present,  must  be  an  absolute  path or a path relative to the user's home (e.g.
       ~/example/path). If omitted the default path of the keyfile is ~/.vde_agno_key. The keyfile must  contain
       a  128-bit  key  in  hexadecimal format. Only hexadecimal characters are considered in both uppercase and
       lowercase, all the others are ignored (e.g. white-spaces, newline characters, non-hexadecimal letters).

Examples

agno://{vde:///tmp/myswitch}

       agno uses the key stored in the default keyfile (~/.vde_agno_key) location to encrypt the traffic sent to
       the switch. The Ethernet frames have agno specific type (0xa6de) as type.

       agno:///tmp/my_keyfile[ethtype=copy]{vde:///tmp/myswitch}

       agno  uses the key stored in file /tmp/my_keyfile to encrypt the traffic sent to the switch. The Ethernet
       frames will have the same type of the non-encrypted packet.

       vdensagno://[ethtype=rand]{vxvde://234.0.0.1}

       create a nanespace connected to a vxvde local area cloud. agno uses the key stored in the default keyfile
       (~/.vde_agno_key) location to encrypt the traffic sent to vxvde.

Name

libvdeplug_agno - vdeplug module: add encryption to ethernet link plug

Notice

       Virtual Distributed Ethernet is not related in any way with  www.vde.com  ("Verband  der  Elektrotechnik,
       Elektronik und Informationstechnik" i.e. the German "Association for Electrical, Electronic & Information
       Technologies").

Options

ethtype=TYPE
              define the type of the Ethernet frame of the encrypted packet.  TYPE  can  be  the  an  exadecimal
              number or:

              copy: same type of the non-encrypted packet

              ipv4: ipv4 type (0x0800)

              ipv6: ipv6 type (0x86dd)

              rand: random number as type. The random number will be generated for every Ethernet packet sent.