TAP driver for the QNX6

[Олег Большаков]

TAP driver for the QNX6
(русская версия)

TAP is a virtual network driver. TAP (as in network tap) simulates an Ethernet device and it operates with layer 2 packets such as Ethernet frames. TAP is used to create a network bridge.

Packets sent by an operating system via a TAP device are delivered to a user-space program that attaches itself to the device. A user-space program may also pass packets into a TAP device. In this case TAP device delivers (or "injects") these packets to the network stack thus emulating their reception from an external source.

TAP is used for creating Virtual Private Networks (VPN), for exampe, VTun or OpenVPN, also as virtual network devices in virtual technologies. TAP driver is available for Linux, *BSD, Solaris, Windows and MAC OS X. Driver implementations in different OS platforms are compatible and allows for manage secured data transfer.

Supplemental information: VTun project, Wikipedia.

TAP driver for the QNX 6.4.1 was developed by CBD BC. Beta version of driver now availabe for download for all comers. We will glad to see any comments and suggestions about this driver.

TAP driver is a standard io-pkt driver. You can mount it with following command:

Код:

# mount -T io-pkt /lib/dll/devnp-qtap.so

After this you can find tap0 network interface and /dev/tap0 character device. Use ifconfig utility to configure TAP network interface:

Код:

# ifconfig tap0 10.1.0.1/24 up

Now driver is ready to work with software, VTun, for example. You can destroy network interface:

Код:

# ifconfig tap0 destroy

And the most interesting is that Qnet can working via TAP devices.

Links

[Олег Большаков]

VTun for QNX6

VTun is a networking application which can set up Virtual Tunnels over TCP/IP networks. It supports Internet Protocol (IP), Point-to-Point Protocol (PPP) and SLIP protocols. It works via TUN and TAP devices.

VTun creates a connection between two machines, over which it multiplexes all traffic. VTun connections are initiated via a TCP connection from the client to the server. The server then initiates a UDP connection to the client, if the UDP protocol is requested.

The software allows the creation of tunnels, for routing traffic in a manner similar to PPP, as well as a bridge-friendly ethertap connection.

VTun can works in the QNX6 via devnp-qtap.so driver.

Supplemental information: VTun home site, Wikipedia

Download

 - vtun-3.0.2-qnx641-bin.tar.bz2 - VTun 3.0.2 for QNX 6.4.1
 - vtun-3.0.2-qnx641-src.tar.bz2 - VTun 3.0.2 source for QNX6

Install:

Код:

# cd /
# tar jxf vtun-3.0.2-qnx641-bin.tar.bz2

VTun configuration file placed in /etc/vtund.conf after installation. It is well documented. Also you can find information about configuring and using VTun in the net. VTun. Link your home and office securely with a virtual private network., for exampe.

[Олег Большаков]

The new version 20100115 TAP driver for QNX6:

 - Added devctl() handler.
 - Added non-blocking mode.

The download link is in the first message of this topic.

[Олег Большаков]

OpenVPN for QNX6

OpenVPN is a free and open source virtual private network (VPN) program for creating point-to-point or server-to-multiclient encrypted tunnels between host computers. It is capable of establishing direct links between computers across network address translators (NATs) and firewalls. It was written by James Yonan and is published under the GNU General Public License (GPL).

OpenVPN uses the OpenSSL library to provide encryption of both the data and control channels. It lets OpenSSL do all the encryption and authentication work, allowing OpenVPN to use all the ciphers available in the OpenSSL package. It can also use the HMAC packet authentication feature to add an additional layer of security to the connection (referred to as an "HMAC Firewall" by the creator). It can also use hardware acceleration to get better encryption performance.

Features of OpenVPN

 - Tunnel any IP subnetwork or virtual ethernet adapter over a single UDP or TCP port.
 - Configure a scalable, load-balanced VPN server farm using one or more machines which can handle thousands of dynamic connections from incoming VPN clients.
 - Use all of the encryption, authentication, and certification features of the OpenSSL library to protect your private network traffic as it transits the internet.
 - Use real-time adaptive link compression and traffic-shaping to manage link bandwidth utilization.
 - Tunnel networks over NAT.
 - Create secure ethernet bridges using virtual tap devices.

OpenVPN can works in the QNX6 via devnp-qtap.so driver.

Supplemental information: OpenVPN home site, Wikipedia

Downoad

 - openvpn-2.1.1-qnx641-bin.tar.bz2 - OpenVPN 2.1.1 for QNX 6.4.1 x86
 - openvpn-2.1.1-qnx641-ppcbe.tar.bz2 - OpenVPN 2.1.1 for QNX 6.4.1 ppcbe
 - openvpn-2.1.1-qnx641-src.tar.bz2 - OpenVPN 2.1.1 source for QNX6

Install:

Код:

# cd /
# tar jxf openvpn-2.1.1-qnx641-bin.tar.bz2

After installing the software documentation for OpenVPN is located in the directory /usr/share/doc/openvpn, sample configuration files - /usr/share/doc/openvpn/sample-config-files.

[benny_huang]

thank you

[joubertf]

thank you, hopefully I can get OpenVPN up and running

[joubertf]

Eureka! Success!

[manu]

Hello!

I am interested in the TAP driver for QNX6. Sadly, the tarball only contains the x86 binary. Any chance you could release the source code? I need different processor architectures...

The only other way is, I have to write the TAP driver myself, which is possible but unfortunate because the work has already been done...

[Олег Большаков]

Hi Manuel,

Presently we're not planning to post the source of the TAP driver. But we can build binary for required platforms.

Just in case, I've just added link to an ARM little-endian version that has been posted in Russian version of this topic.

[manu]

Thank you!

I would of course prefer the source, but the arm-le binary already helps. A ppc-be version would also be nice.

What about the licence? Can we use the driver for a commercial product?

[Олег Большаков]

You are welcome.

We'll make a devnp-qtap build for PPC BE. Stay tuned.

Please, feel free to think about license for our TAP driver as a public domain. You can freely use this binary driver in your commercial product.

[Олег Большаков]

Hi Manuel,

I've just added link to the ppc-be build. Please, find it in the first message of this topic. Keep in mind that this build is not tested.

[manu]

Thanks again! I'll let you know if the driver works...

[m0da]

Thank you for your work!

Is there any way of specifying your own MAC address for the TAP driver? Possibly upon loading the driver?

Thanks again.

[Олег Большаков]

I'll add mac option and build new version this week.