experimental OpenBSD MAP-E CE support (feedback)
An experimental implementation of MAP-E CE (RFC7597) support has been developed for OpenBSD 7.8, enabling address and port mapping through encapsulation. The project involves patches to pf(4) and dhcp6leased(8), along with scripts to automate setup. It is not intended for production use and remains under active development.
- ▪The project adds MAP-E CE support to OpenBSD 7.8 using patches for pf(4) and dhcp6leased(8).
- ▪Users must patch the kernel, rebuild system components, and configure network interfaces to enable MAP-E functionality.
- ▪The implementation includes a Perl application and the maped daemon to manage network setup and port mapping.
- ▪MAP-E operation can be verified through interface checks and pfctl rules under the mape anchor.
- ▪Feedback and contributions are encouraged via the project's mailing list.
Opening excerpt (first ~120 words) tap to expand
#OpenBSD MAP-E CE support This repository contains a collection of patches and scripts to add Customer Edge Mapping of Address and Port with Encapsulation, widely known as MAP-E CE (RFC7597), support to OpenBSD 7.8. #Status This is an experimental project. Do not rely on this implementation for production use. #1. Setup The following are required: openbsd-pf-map-e-ce adds MAP-E NAT support to pf(4). dhcp6leased(8) adds support for MAP-E CE to the base system. Basic networking configuration. A companion application to automate the network setup process. The packet filter patch has been publicly available since 2021. Applying the patch enables port mapping in MAP-E. Once pf(4) has been patched, use the Perl application to bring up a gif(4) interface.
…
Excerpt limited to ~120 words for fair-use compliance. The full article is at Sr.
Discussion
0 commentsMore from Sr
