Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also .

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also .
base repository: wertarbyte/openssh-portable
base: master
Choose a base ref
...
head repository: wertarbyte/openssh-portable
compare: bindaddress_ipv6_pref
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 1 commit
  • 3 files changed
  • 1 contributor

Commits on Aug 19, 2016

  1. extend BindAddress option to select the type of IPv6 address 

    When using IPv6 autoconfiguration, the IP address is deducted using the unique
hardware address of the network card and the announced network prefix. Since
this might lead to privacy issues, most operating systems generate
pseudo-random addresses that are rotated in regular intervals.

This can be a problem for long-running connections if a address is invalidated
while still in use - the connection "hangs". Even though expired addresses are
usually retained for a long timeframe to prevent this, accidental dis- and
reconnection (e.g. when using a wireless network) flushes the list of
previously used addresses.

By setting appropiate socket options, the kernel can be instructed to use the
public (and static) source address for the outgoing connection. This change
implements this functionality for SSH, adding special behaviour to the option
"BindAddress" (-b) that can be set to "%pub(lic)", "%t(e)mp", indicating the
preference for the type of address to be used. The prefixed percentage sign is
used to distinguish the arguments from ordinary hostnames (just like ping6 does
with appended interface names on link local addresses).
    @wertarbyte
    wertarbyte committed Aug 19, 2016
    3365752