[Click] click Digest, Vol 81, Issue 5

[John Russell Lane]

Hi Eddie,

> John, if RawSocket is in fact dead I would appreciate confirmation so I can
> remove it from the tree.

The "proper" library was definitely deprecated with the new PlanetLab
release, so I don't see any reason the Click code related to it can't
be removed.  See: http://www.planet-lab.org/node/247  ... as well as
the email included below.

For those interested, proper's basic functionality was replaced by vsys:

  http://www.cs.princeton.edu/~sapanb/vsys/

However, with respect to Click and raw socket usage, the new PlanetLab
release (4.2+) now uses netfilter (by which inbound packets are tagged
/ assigned to vservers), which allows, for example, "ownership" of
port ranges:

  http://lists.planet-lab.org/pipermail/users/2009-August/003377.html
  http://lists.planet-lab.org/pipermail/devel/2008-February/002291.html

It is my understanding that no particular user-level code changes are
required to use the new functionality within a slice (another
advantage over proper) and even raw sockets should work, although it
is necessary to register port ranges to be used via the process
described on the pages noted above and the interface here:

  http://planetflow.planet-lab.org/#port

Finally, it seems (from the URL above) that the tun/tap interface is
still not working (so FromDevice/ToDevice will still not work) and
Click users are left with Socket for packet input / output; if someone
knows otherwise, please say so, since I haven't tried this.

Thanks!

jrl.

---

From: Sapan Bhatia via RT <support at planet-lab.org>
Date: Fri, Sep 12, 2008 at 2:48 AM
To: johnrlane at gmail.com

Hi John,

Yes, Proper has been deprecated. The semantics for getting access to a
restricted resources have changed, and depend on the resource you are
trying to get access to. In this case, it appears that the resource is
RAW sockets. All sockets have isolated RAW socket access, so if you
create the socket directly instead of invoking Proper, then it should
just work.

Are you trying to set up IIAS?

Sapan