Tool for virtual networks
jhellenthal at dataix.net
Fri Jul 15 14:25:40 UTC 2022
For a quick cursory overview of this project, I would urge you to add an adendum or change the following line in the installation documentation...
"%sudo ALL=(ALL:ALL) NOPASSWD: ALL"
This is technically influencing bad behavior with sudo for those that are not aware of the security impacts of such decisions.
I'm not one to provide a negative remark usually without suggesting a result that provides a positive impact that can be built upon. So with that said and along the lines of that id suggest adjusting the documentation to contain something of the sorts of a guided only per user or separate group other than "%sudo"... maybe "%cougarnet" and add instructions for creating the group and adding users to that group.
Beyond that... nice project and thank you for your contribution to networking. This may be beyond the scope of just this one mailing list and wish you the best.
> On Jul 14, 2022, at 17:01, Casey Deccio <casey at deccio.net> wrote:
> Dear colleagues,
> I've been developing a tool for building and experimenting with virtual networks, primarily for use with teaching network protocols. It's an active work-in-progress, but I thought it might be time to reach out to NANOG in case anyone else might find it useful and/or might have feedback to offer. Here is the code:
> It includes layer-2 switches, VLANs and trunking, and routers, all using Linux processes in their own namespaces as network "nodes". It was inspired by mininet (https://mininet.org) but it was developed from scratch to meet different needs.
> The README has additional information. If you install and run the code, *please* do it in a *virtual machine*. At this point, it requires superuser capabilities to run things like "ip link", "ip addr", and "sysctl", among other things, using sudo. Much on the to-do list, but it meets my immediate needs. Just wanted to share in the mean time.
The fact that there's a highway to Hell but only a stairway to Heaven says a lot about anticipated traffic volume.
More information about the NANOG