ResiLien/nebula
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Support startup without a tun device (#269)

Browse Source 
This commit adds support for Nebula to be started without creating
a tun device. A node started in this mode still has a full "control
plane", but no effective "data plane". Its use is suited to a
lighthouse that has no need to partake in the mesh VPN.

Consequently, creation of the tun device is the only reason nebula
neesd to be started with elevated privileged, so this example
lighthouse can also be run as a non-root user.
This commit is contained in:
forfuncsake
2020-08-10 23:15:55 +10:00
committed by GitHub
parent 7b3f23d9a1
commit 9b8b3c478b
3 changed files with 82 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
examples/config.yml
View File

@ -124,6 +124,8 @@ punchy:
# Configure the private interface. Note: addr is baked into the nebula certificate
tun:
# When tun is disabled, a lighthouse can be started without a local tun interface (and therefore without root)
disabled: false
# Name of the device
dev: nebula1
# Toggles forwarding of local broadcast packets, the address of which depends on the ip/mask encoded in pki.cert