source: etherws/trunk/README.rst @ 144

Revision 144, 2.0 KB checked in by atzm, 12 years ago (diff)
  • add document for ssl/tls
  • Property svn:keywords set to Id
RevLine 
[141]1Introduction
2============
3etherws is an implementation of Ethernet over WebSocket tunnel
4based on Linux Universal TUN/TAP device driver.
5
6Usage
7=====
8For example, if you want to make virtual ethernet link for VM1 and VM2
9whose hypervisor's broadcast domains were split by router R::
10
11  +------------------+            +------------------+
12  | Hypervisor1      |            |      Hypervisor2 |
13  |  +-----+         |            |         +-----+  |
14  |  | VM1 |         |            |         | VM2 |  |
15  |  +--+--+         |            |         +--+--+  |
16  |     | (vnet0)    |            |    (vnet0) |     |
17  |  +--+--+         |            |         +--+--+  |
18  |  | br0 |         |            |         | br0 |  |
19  |  +--+--+         |            |         +--+--+  |
20  |     |            |            |            |     |
21  | (ethws0)  (eth0) |            | (eth0)  (ethws0) |
22  +----||--------+---+            +----+-------||----+
23       ||        |        +---+        |       ||
24       ||   -----+--------| R |--------+-----  ||
25       ||                 +---+                ||
26       ||                                      ||
27       ``======================================''
28            (Ethernet over WebSocket tunnel)
29
30then you can type following commands.
31
32on Hypervisor1::
33
34  # etherws server
35  # brctl addbr br0
36  # brctl addif br0 vnet0
37  # brctl addif br0 ethws0
38  # ifconfig br0 up
39
40on Hypervisor2::
41
42  # etherws client --uri ws://<Hypervisor1's IP address>/
43  # brctl addbr br0
44  # brctl addif br0 vnet0
45  # brctl addif br0 ethws0
46  # ifconfig br0 up
47
[144]48Also etherws supports SSL/TLS connection (but authentication is not
49supported yet), so if you want to encrypt this tunnel, then you can
50use following options::
51
52on Hypervisor1 (options *keyfile* and *certfile* were specified)::
53
54  # etherws server --keyfile ssl.key --certfile ssl.crt
55
56on Hypervisor2 (option *uri*'s scheme was changed to *wss*)::
57
58  # etherws client --uri wss://<Hypervisor1's IP address>/
59
[141]60History
61=======
[144]620.2 (2012-05-16 JST)
63  - SSL/TLS connection support
64
650.1 (2012-05-15 JST)
[141]66  - First release
Note: See TracBrowser for help on using the repository browser.