nihalpasham / rustdhipv2 Goto Github PK

Hello,

I am developing a type of P2P vSwitch VPN in Rust that will run as a transparent hypervisor a virtualized OS under it and came across your rusthip2 project which sounds very promising and could have potential for my needs as well.

I was just wondering if you have done any type of benchmarks against native networking and/or other approaches to see how fast and reliable this approach could be?

It should be very fast and probably even less cumbersome than Wireguard as well, but I am just wondering at the moment.

Best and have a great day

In the "Conclusion" section, you state:

Note - Certifying public keys or otherwise creating trust relationships between hosts has explicitly been left out of the HIP architecture, it is expected that each system using HIP may want to address it differently.

However, this is not entirely accurate. In HIPv1, HIP Certificates were specified in RFC 6253, which was then updated for HIPv2 as RFC 8002. It's far from mandatory, and alternative trust mechanisms are openly and explicitly discussed in the relevant RFCs, but it is part of the architecture.

You may also be interested in some of the other RFCs in the working group's document tracker, such as RFC 8046, which acts to pull together the topics relevant to making mobility work with HIPv2. There's also a draft (submitted to the IESG for publication as an RFC, but sitting in queue) covering NAT traversal.

EDIT: I would like to say that I'm quite excited to find this project - I've been interested in HIPv2 for some years now, but never managed to get over the line and start implementing it in Rust myself.