The "Policy driven ATMARP Daemon" (paarpd) provides an address resolution
service (ARP) for Logical IP Subnets (LIS) in "Classical IP and ARP over ATM"
environments (CLIP) of Asynchronous Transfer Mode (ATM) networks as defined
in RFC1577.
These services are governed by an administratively defined policy to
provide a more secure and reliable service while still being RFC compliant.
This software is provided under the BSD license.
|
Features: |
paarpd implements a RFC 1577 compliant ATM address
resolution service:
- store ATM address to IP address mappings
- administer the address cache, i.e. manage timeouts, update
entries, remove entries
- respond to ATM ARP-queries
- Besides these standard mechanisms a policy based behavior allowes for
the following actions:
- allow or deny address registrations based on ATM and IP address
lists
- allow or deny address resolutions based on questioner's ID
- validate the frequency of incoming requests to prevent denial of
service attacks
- manage multiple logical IP subnets (LIS) and provide LIS-local
views to LIS members
- provide configurable audit mechanisms
- Written in plain ANSI C with for a POSIX compliant environment
- Using POSIX threads for good scaling
|
Project status:
This project is inactive!
At the moment, the server is of prototype status. Although it is reasonably stable and provides all of the
functions required by RFC1577, it is not stable enough to be put
into use in a production environment and a lot of functions are
missing to make it a "real" daemon.
A complete rewrite of the server will be done in the near future and
will incorporate everything that was learned from this first version
but will also be of better internal sturcture to be reliable
enough to be used in a production environment.
|
Future development: |
- Support for RFC2225 clients
- More options to control allowd client behaviour
- More flexible configuration file syntax
- Ports to other platforms (e.g Linux)
|
Documentation: |
- The README from the distribution
- The LICENSE from the distribution (BSD-style license).
- The Manual Page of the config file from the distribution.
- Snapshot of sample audit output
- ... more to come
|
Project resources: |
- Our project
page hosted by
sourceforge.
Access to the actual developer CVS tree,
mailing lists, bugtracking lists etc.
- The server homepage back at the DFN Firewall Laboratory.
|
Download: |
- Source distributions:
- Please contact the project admins for sources.
- Binary distributions:
|
Links: |
|
Last changed: 08.05.2001.