cloudflare / cloudflare/boringtun

BoringTun should be Linux network namespace aware

Open
#174 1 comment 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Rust
Stars
7.2k
Forks
532
PR merge metrics
No merged PRs in 30d

Description

Setup scenario:

1. Create two network namespaces
2. In each namespace create an interface with `boringtun [-f] `

Now I can use the `wg(8)` tool in either namespace (and probably from outside as well) to configure any interface in any network namespace. Moreover, if I use the same interface name in both namespaces, the `wg(8)` tool will show only 1 interface and setting configuration options using `wg(8)` actually overwrites both interface configs.

Expected behaviour (on parity with the kernel implementation):

I can independently create and configure a wireguard interface in each network namespace. The interfaces can even be named in the same way (for example `wg0`) and the `wg(8)` sees and configures only interfaces from its own network namespace.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.