1 |
=head1 NAME |
2 |
|
3 |
C<vped> - Virtual Private Ethernet Daemon |
4 |
=head1 SYNOPSIS |
5 |
|
6 |
C<vped> [B<-cDlL>] [B<--config=>I<DIR>] [B<--no-detach>] [B<-l=>I<LEVEL]>] |
7 |
[B<--kill>[B<=>I<SIGNAL>]] [B<--mlock>] [B<--help>] [B<--version>] |
8 |
I<NODENAME> |
9 |
|
10 |
=head1 DESCRIPTION |
11 |
|
12 |
This is the manual page for vped, the virtual private ethernet daemon. |
13 |
When started, C<vped> will read it's configuration file to determine the |
14 |
network topology, and other configuration information, assuming the role |
15 |
of node I<NODENAME>. It will then connect to the tun/tap device and set |
16 |
up a socket for incoming connections. Then a script will be executed to |
17 |
further configure the virtual device. If that succeeds, it will detach |
18 |
from the controlling terminal and continue in the background, accepting |
19 |
and setting up connections to other vped daemons that are part of the |
20 |
virtual private ethernet. |
21 |
|
22 |
=head1 OPTIONS |
23 |
|
24 |
=over 4 |
25 |
|
26 |
=item B<-c>, B<--config=>I<DIR> |
27 |
|
28 |
Read configuration options from I<DIR> |
29 |
|
30 |
=item B<-d>, B<--l=>I<LEVEL> |
31 |
|
32 |
Set logging level to I<LEVEL> (one of: noise, trace, debug, info, notice, |
33 |
warn, error, critical). |
34 |
|
35 |
=item B<--help> |
36 |
|
37 |
Display short list of options. |
38 |
|
39 |
=item B<-D>, B<--no-detach> |
40 |
|
41 |
Don't fork and detach but stay in foreground and log messages to stderr in |
42 |
addition to syslog. |
43 |
|
44 |
=item B<-L>, B<--mlock> |
45 |
|
46 |
Lock C<vped> into main memory. This will prevent sensitive data like |
47 |
shared private keys to be written to the system swap files/partitions. |
48 |
|
49 |
=item B<--version> |
50 |
|
51 |
Output version information and exit. |
52 |
|
53 |
=back |
54 |
|
55 |
=head1 SIGNALS |
56 |
|
57 |
=over 4 |
58 |
|
59 |
=item HUP |
60 |
|
61 |
Closes/resets all connections, resets the retry time and will start connecting |
62 |
again (it will NOT re-read the config file). This is useful e.g. in a |
63 |
C</etc/ppp/if-up> script. |
64 |
|
65 |
=item TERM |
66 |
|
67 |
Closes/resets all connections and exits. |
68 |
|
69 |
=item USR1 |
70 |
|
71 |
Dump current network status into the syslog (at loglevel C<notice>, so make |
72 |
sure your loglevel allows this). |
73 |
|
74 |
=back |
75 |
|
76 |
=head1 FILES |
77 |
|
78 |
=over 4 |
79 |
|
80 |
=item C</etc/vpe/vped.conf> |
81 |
|
82 |
The configuration file for C<vped>. |
83 |
|
84 |
=item C</etc/vpe/if-up> |
85 |
|
86 |
Script which is executed as soon as the virtual network device has been |
87 |
allocated. Purpose is to further configure that device. |
88 |
|
89 |
=item C</etc/vpe/node-up> |
90 |
|
91 |
Script which is executed whenever a node connects to this node. This can |
92 |
be used for example to run nsupdate. |
93 |
|
94 |
=item C</etc/vpe/node-down> |
95 |
|
96 |
Script which is executed whenever a conenction to another node is lost. |
97 |
for example to run nsupdate. |
98 |
|
99 |
=item C</etc/vpe/pubkey/*> |
100 |
|
101 |
The directory containing the public keys for every node, usually |
102 |
autogenerated by executing C<vpectrl --generate-keys>. |
103 |
|
104 |
=item C</var/run/vped.pid> |
105 |
|
106 |
The PID of the currently running C<vped> is stored in this file. |
107 |
|
108 |
=back |
109 |
|
110 |
=head1 BUGS |
111 |
|
112 |
The cryptography in vped is not thoroughly checked by many people yet. Use |
113 |
it at your own risk! |
114 |
|
115 |
If you find any bugs, report them to C<vpe@plan9.de>. |
116 |
|
117 |
=head1 TODO |
118 |
|
119 |
A lot. |
120 |
|
121 |
=head1 SEE ALSO |
122 |
|
123 |
vpe(5), vped.conf(5), vpectrl(8). |
124 |
|
125 |
vpe comes with ABSOLUTELY NO WARRANTY. This is free software, and you are |
126 |
welcome to redistribute it under certain conditions; see the file COPYING |
127 |
for details. |
128 |
|
129 |
=head1 AUTHORS |
130 |
|
131 |
Marc Lehmann C<< <vpe@plan9.de> >>. |
132 |
|
133 |
And thanks to many others for their contributions to vpe, especially the |
134 |
tincd authors, who inspired me to write this program (after scavenging |
135 |
their sourcecode ;). |
136 |
|