will TAP devices be supported in addition to TUN devices about nebula HOT 2 CLOSED

We currently only reason about packets in IP frames. TAP would need us to deal with ethernet frames as well. Can you tell us more about your motiviation for TAP?

from nebula.

@nbrownus

Hi Nathan. I retired from 20 yrs at Cisco Systems in 2014 and spend alot of time helping schools w/technical projects.

I do alot of work with Ubuntu and LXD Containers . LXD containers are thought of as "system" containers because they run a complete linux distro (fedora, centos, debian, ubuntu, alpine etc) vs Docker which is often termed an "application" container.

However, both LXD and Docker containers connect to their Host/Server using a Bridge by default.

• An LXD Host/Server creates a LXDBR0 bridge which by default all LXD containers on that Host connect to.
• All Docker installations represent the docker0 network with bridge; Docker connects to bridge by default.

As a Bridge by definition is L2 having an L2 (TAP) capability makes using a VPN much easier to implement & use. Yes, in both LXD or Docker you could implement VXLAN and GRETAP over Nebula (or WireGuard) L3 VPN then bridge that to the LXDBR0 or Docker Bridge at L2.

But that would increase complexity and add some overhead.

So at least for my use-case the availability of a TAP device would make Nebula much easier/simpler to utilize.

As FYI a diagram of my use-case is below.
I "think" you can click on it to enlarge it to get an idea of what I want to do.

from nebula.