forked from kame/kame
/
COVERAGE
170 lines (115 loc) · 4.33 KB
/
COVERAGE
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
Support coverage table for KAME/*BSD and KAME-merged *BSD
KAME project
$Id: COVERAGE,v 1.51.2.1 2000/06/27 16:53:12 itojun Exp $
x: supported/integrated
-: not supported/not integrated
KAME
net142 open27 free228 free35 free4 bsdi31 bsdi41
-- -- -- -- -- -- --
TCP/UDP see IMPLEMENTATION for details
ALTQ x x x x x - -
IPsec x (*1) x x (*2) x x
(*1) OpenBSD IPsec is available for IPv4 IPsec. no IPv6 IPsec.
(*2) kernel compiles, panics frequently
NAT/PT (*1) (*1) x (*1) ? (*1) (*1)
(*1) compilable but not tested
mobile-ip6 (*1) (*1) (*1) (*1) (*1) (*1) (*1)
(*1) compilable but not tested
2292bis on TCP x (*1) x x ? x x
(*1) code exists, but not tested
getaddrinfo obeys configured resolv order
x x - - x - -
KAME extended resolver (IPv6 transport, EDNS0, bogus address filtering)
x x x x - x -
(+): see above for KAME/*BSD differences
KAME merged *-current merged
*BSD net open free net15 open27 free40 bsdi42
-- -- -- -- -- -- -- ---
KAME IPv6 as of latest early early early notyet late early
june00 june00 nov99 may00 nov99
IPv4 IPsec KAME KAME openbsd KAME notyet openbsd KAME
IPv6 IPsec KAME KAME openbsd KAME notyet - KAME
(*1)
(*1) no extension header support yet (fragment header is supported),
hardware acceleration is available.
KAME IPsec as of
latest 12jun00 - early notyet - early
nov99 nov99
TCP/UDP see IMPLEMENTATION for details
advanced API 2292bis 2292 2292 2292 notyet 2292 2292
getifaddrs x x x - notyet x -
icmp6 nodeinfo 05 05 05 05- notyet 05- 05-
(*1) (*1) (*1) (*1) (*1)
(all) spec conformance is still low. "05-" means 05/03 chimera.
(*1) does not join NI group address
nd6_proxyall - - - x notyet - x
ndp -s proxy x x x - notyet x -
ndp -I x x x - notyet x -
NUD on p2p x x x - notyet x -
(ndp -i)
NUD on p2p only if real neighbor
x x x - notyet (*1) -
(*1) temporary workaround (no NUD on p2p by default)
icmp6 beyondscope
x x x - notyet (*1) -
(*1) supports it, but has bug in link-local address check.
old/new mrt6msg (old: overlay with ip6 header, new: with MLD6 header)
new (*1) (*1) old notyet old old
(*1) supports both new/old mrt6msg, to provide binary backward compat
CMSG_ALIGN ALIGN sysctl ALIGN ALIGN notyet ALIGN ALIGN
(*1) (*1) (*2) (*1) (*2)
(*1) has namespace pollution bug, KAME PR 230.
(*2) requires separate inclusion of machine/param.h.
(all) backward binary compatibility for old code that uses old CMSG_xx
is not provided (yet).
CMSG passing in unix domain socket obeys CMSG_xx
- x - x notyet - x
getaddrinfo obeys configured resolv order
(+) x x - notyet x -
getaddrinfo supports AI_ADDRCONFIG (2553bis)
- - - ? notyet - ?
getnameinfo uses addr%numeric for scopeid > maxifindex
x x x - notyet x -
getnameinfo, 2nd arg type is socklen_t
x x x - notyet - -
getnameinfo uses EAI_xx as return value (2553bis)
x x x - notyet x -
ALTQ (+) - - - notyet - -
IPsec (+) x (*1) (*2) notyet (*1) (*2)
(*1) OpenBSD IPsec is available for IPv4 IPsec. OpenBSD team is working
on OpenBSD IPsec support for IPv6 IPsec (no KAME IPsec is integrated)
(*2) policy management code is different from post-dec99 code
NAT/PT (+) - - - notyet - -
mobile-ip6 (+) - - - notyet - -
IPv6 RPC - x - - notyet - -
IPv6 NFS - x - - notyet - -
resolver support for IPv6 transport
(+) (*1) - - notyet - -
(*1) libc resolver can handle IPv6 transport (IPv6 address in
/etc/resolv.conf), but not with userland tools like nslookup or dig.
scoped addr in /etc/hosts (getaddrinfo)
(+) x x - notyet x -
scoped addr in /etc/resolv.conf "nameserver" line
(+) x - - notyet - -
ipsec socket passing to ip{6,}_output
aux aux - rcvif notyet - rcvif
+ flags + flags
source address selection
latest may00 may00 nov99 notyet feb00 nov99
+ sitelocal + sitelocal
6to4 intface x x - gifhack notyet - gifhack
basic userland x x x x notyet x x
route6d x x x x notyet x x
hroute6d x - - - notyet - -
bgpd x - - - notyet - -
pim6dd x x - x notyet - x
pim6sd x x - x notyet - x
rtsol/rtsold x x x x notyet x x
rtadvd x x x x notyet x x
rrenumd x - - x notyet - x
faithd x x x x notyet x x
CAVEATS:
- openbsd27 has some bugs in IPv6 multicast API handling. if you would like
to use IPv6, it is suggested to upgrade to openbsd 2.7-STABLE kernel.
syslogd x x - - notyet - -
lpr/lpd x x - - notyet - -