Ethernet over UDP, similar of VXLAN, transport Ethernet packet via UDP, support data encryption, udp connection failover
Sample config
package needs to compile
CentOS:
openssl-devel lz4-devel libpcap-devel
Debian
libssl-dev liblz4-dev libpcap-dev
and Debian liblz4 miss LZ4_compress_fast, you need rebuild it as https://github.com/facebook/mcrouter/issues/149
apt-get install dpkg-dev debhelper
echo "deb-src http://ftp.de.debian.org/debian/ stretch main" > /etc/apt/sources.list.d/stretch-source-packages.list
apt-get update
apt-get source lz4=0.0~r131-2
cd lz4-0.0~r131
dpkg-buildpackage -rfakeroot -uc -b
cd ..
dpkg -i liblz4-1_0.0~r131-2_amd64.deb liblz4-dev_0.0~r131-2_amd64.deb
Increasing Linux kernel network buffers
For better performance, increase the UDP receive buffer size from 128K to 32MB
sysctl -w net.core.rmem_max=33554432
1. mode e
Bridge two ethernets using UDP
|-------Internet---------|
| |
| | | |
| |IPA IPB| |
eth1| |eth0 eth0| |eth1
+----+----+----+ +----+----+----+
| server A | | server B |
+--------------+ +--------------+
Each server connects Internet via interface eth0, IP is IPA & IPB.
On server A, run following command
ip link set eth1 up
ethtool -K eth1 gro off
ifconfig eth1 mtu 1508
./EthUDP -e IPA 6000 IPB 6000 eth1
On server B, run following command
ip link set eth1 up
ethtool -K eth1 gro off
ifconfig eth1 mtu 1508
./EthUDP -e IPB 6000 IPA 6000 eth1
will bridge eth1 of two hosts via internet using UDP port 6000
how it works:
- open raw socket for eth1
- open udp socket to remote host
- read packet from raw socket, send to udp socket
- read packet from udp socket, send to raw socket
2. mode i
create a tap tunnel interface using UDP
|------------Internet--------------|
| |
| |
|IPA IPB|
|eth0 eth0|
+------+-------+ +-------+------+
| server A +--IP1--------IP2--+ server B |
+--------------+ +--------------+
Each server connects Internet via interface eth0, IP is IPA & IPB.
On server A, run following command
./EthUDP -i IPA 6000 IPB 6000 IP1 masklen
On server B, run following command
./EthUDP -i IPB 6000 IPA 6000 IP2 masklen
will create a tap tunnel interface and setup IP1/masklen IP2/masklen via internet using UDP port 6000
how it works:
- open tap raw socket, setip addr
- open udp socket to remote host
- read packet from raw socket, send to udp socket
- read packet from udp socket, send to raw socket
3. mode b
create a tap tunnel interface using UDP
|------------Internet--------------|
| |
| |
|IPA IPB|
|eth0 eth0|
+------+-------+ +-------+------+
| server A +--bridge----bridge| server B |
+------+-------+ +-------+------+
|eth1 |eth1
Each server connects Internet via interface eth0, IP is IPA & IPB.
On server A, run following command
brctl addbr br0
ip link set eth1 up
brctl addif br0 eth1
./EthUDP -b IPA 6000 IPB 6000 br0
On server B, run following command
brctl addbr br0
ip link set eth1 up
brctl addif br0 eth1
./EthUDP -b IPB 6000 IPA 6000 br0
will create a tap tunnel interface and add to br0 internet using UDP port 6000
how it works:
- open tap raw socket, run shell
brctl add if ??? tap?add to bridge - open udp socket to remote host
- read packet from raw socket, send to udp socket
- read packet from udp socket, send to raw socket
4. mode t
using libpcap to capure packets and tranfer to remote site
Note:
- support 802.1Q VLAN frame transport
NIC MTU should set to 1504 or 1508, for single 802.1Q or double 802.1Q tag. But some NICs do not allow change the default 1500.
- support automatic tcp mss fix
- if your NIC support GRO, you should disable it by
ethtool -K eth1 gro off
- support connection from NATed server
If server A has public IP, while server B connect from NATed IP, please run (port is 0)
./EthUDP -e -p password IPA 6000 0.0.0.0 0 eth1 in A
./EthUDP -e -p password IPB 6000 IPA 6000 eth1 in B
- support master slave switchover
Using master udp connection, switch to slave if master down(send/recv ping/pong message 1/sec)
./EthUDP ... IPA portA IPB portB ... SlaveIPA SlaveportA SlaveIPB SlaveportB
./EthUDP ... IPB portB IPA portA ... SlaveIPB SlaveportB SlaveIPA SlaveportA
- support AES-128/192/256 encrypt/decrypt UDP traffic
./EthUDP ... -enc aes-128 -k aes_key ...
- support LZ4 compress
./EthUDP ... -lz4 1 ...
- support VLAN maping
./EthUDP ... -m vlanmap.txt ...
vlanmap.txt
#my_vlan remote_vlan
10 30
40 100
- support UDP packet fragment
./EthUDP ... -mtu 1500
split UDP packet length exceed 1500 bytes to two UDP packets
No comments:
Post a Comment