| Re: [chrony-dev] Multihomed (multiple) network interfaces support ! |
[ Thread Index |
Date Index
| More chrony.tuxfamily.org/chrony-dev Archives
]
- To: chrony-dev@xxxxxxxxxxxxxxxxxxxx
- Subject: Re: [chrony-dev] Multihomed (multiple) network interfaces support !
- From: Miroslav Lichvar <mlichvar@xxxxxxxxxx>
- Date: Wed, 30 Aug 2023 10:39:51 +0200
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1693384794; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=4IEYIbKZ42IFzFGwVRRW7Kg3YCeA9x+jugY4G0Ari+I=; b=NNvh9jtYu9xsv1fxOB9q55op20fXShLUfA3Kl+EcVpCAe2qEUy055Pn5iU9mlnJETsTWR7 lSiKl5P+2pvvVYGb2QaS8LYgACa54caDDp8sAxVi6TShLI3Xv+/gkcsAHiyqvzBe8h5/06 xpkxTIsFa562KmnSI0XyR7/NmMbw1c8=
On Wed, Aug 30, 2023 at 10:19:56AM +0300, CpServiceSPb wrote:
> There are some multihomed computers which have several network interfaces,
> for example lan, wif1i, wifi2, dmz, wan.
> At the time chrony are binded either to 0.0.0.0 address, which is meaning "
> listen on every available network interface " or only once specified
> interface/address by "bind..." directives.
> Yes, there is "allow" directive as well.
> But anyway there is listening to all the interfaces remaining, that is not
> good.
Why is it not good? Is it meant to be a security measure? Would
firewall not work better?
> Dear developers, please add availability of binding to several interfaces
> specified in conf file may be by specifying multiple times of binddevice
> or bindaddress, for example:
> bindaddress192.168.0.0/24 # lan
> bindaddress172.10.0.0/24 # dmz
For compatibility with current configuration, which effectively
applies only the last occurence per IPv4/IPv6, I think it would need
to be specified on one line like this
bindaddress 192.168.0.0/24 172.10.0.0/24
It can be implemented, but there should be a good use case for it.
--
Miroslav Lichvar
--
To unsubscribe email chrony-dev-request@xxxxxxxxxxxxxxxxxxxx with "unsubscribe" in the subject.
For help email chrony-dev-request@xxxxxxxxxxxxxxxxxxxx with "help" in the subject.
Trouble? Email listmaster@xxxxxxxxxxxxxxxxxxxx.