erbium
erbium copied to clipboard
isomer
Networking services for small/home networks.
https://en.wikipedia.org/wiki/Multi-armed_bandit seems like a good way to choose which dns server to foward to, experiment to find something near optimal.
we should protect against cache poisoning by implementing dnssec, as well as protecting against information leakage by implementing RFC8198: Aggressive Use of DNSSEC-Validated Cache.
dns attempts to rate limit error packets to avoid being used in reflection attacks, but currently the ratelimiter is very poorly tuned...
Supporting mDNS would be nice from a service discovery point of view, possibly also allowing clients on different subnets to be able to share in service discovery. DNS could also...
Clients need access to an ntp server to be able to set their time accurately. erbium should have an ntp client so that it has an accurate clock, and should...
ideally it should default on if radv has pref64 configured to avoid depleting the v4 address pool.
dhcp currently doesnt support dhcp relays getting a lease. this is technically in violation of the rfc, and this should be fixed.
erbium should optionally populate the arp table when giving out dhcp leases. Either as a way to pre-warm the arp table, or providing a permanent entry making arp spoofing against...
It would greatly easy debugging if all network elements implement lldp. We should be the change we want to see in the world and make sure erbium supports lldp. phase...
Filing this mostly to track my work on this - it would be great if erbium supported RFC8914
