[tor-talk] IPv6 /48 for OnionCat

grarpamp grarpamp at gmail.com
Sun Aug 28 08:00:36 UTC 2016


On 8/28/16, Mirimir <mirimir at riseup.net> wrote:
> Is it possible to specify a different /48?

On the command line or config file, currently, in r570? No.
Excluding tunnel setup it's in src/ocat_netdesc.h.
Go ahead and add the -option if you want, seems useful.

Make sure you check the rfc and document your prefix
generation, some of the example scripts out there are
also wrong, and I believe the current prefix is unreproducible.
There's also a voluntary registry of sorts.

> I understand that would break
> routing from stock OnionCat. But that's actually the goal.

I think you'd end up with a "private" network via breakage,
though it seems hardly a security feature without end
to end keying / packet filtering. See also -U and -R.

I could see ocat expanded to recognize a list of known
prefixes where you'd handle each differently in the host
stack (via interfaces, or even subinterface / vlan presentation)
even though they're all backhauled over a -t tor.
Today that would require running multiple onioncats
with no way to multiplex the prefixes over a -s.

You probably know about this thread spanning months
where people interested in onioncat...
https://lists.torproject.org/pipermail/tor-dev/2016-April/010847.html

Do wish the mailing list and all its archives would come back.

https://www.onioncat.org/
https://www.cypherpunk.at/onioncat_trac/


More information about the tor-talk mailing list