iproute2/tipc
Tuong Lien 2bf1ba5a5c tipc: add option to set rekeying for encryption
As supported in kernel, the TIPC encryption rekeying can be tuned using
the netlink attribute - 'TIPC_NLA_NODE_REKEYING'. Now we add the
'rekeying' option correspondingly to the 'tipc node set key' command so
that user will be able to perform that tuning:

tipc node set key rekeying REKEYING

where the 'REKEYING' value can be:

INTERVAL              - Set rekeying interval (in minutes) [0: disable]
now                   - Trigger one (first) rekeying immediately

For example:
$ tipc node set key rekeying 60
$ tipc node set key rekeying now

The command's help menu is also updated with these descriptions for the
new command option.

Acked-by: Jon Maloy <jmaloy@redhat.com>
Signed-off-by: Tuong Lien <tuong.t.lien@dektech.com.au>
Signed-off-by: David Ahern <dsahern@gmail.com>
2020-10-20 09:04:45 -06:00
..
.gitignore tipc: add new TIPC configuration tool 2015-05-21 14:41:41 -07:00
bearer.c tipc: support interface name when activating UDP bearer 2019-06-28 16:03:16 -07:00
bearer.h tipc: refractor bearer to facilitate link monitor 2016-09-20 09:13:09 -07:00
cmdl.c tipc: add option to set rekeying for encryption 2020-10-20 09:04:45 -06:00
cmdl.h tipc: add option to set rekeying for encryption 2020-10-20 09:04:45 -06:00
link.c tipc: fixed a compile warning in tipc/link.c 2020-07-13 08:43:32 -07:00
link.h tipc: add new TIPC configuration tool 2015-05-21 14:41:41 -07:00
Makefile iproute2: Installation errors without libmnl 2018-12-04 14:27:08 -08:00
media.c tipc: Add support to set and get MTU for UDP bearer 2018-05-09 20:53:32 -07:00
media.h tipc: add new TIPC configuration tool 2015-05-21 14:41:41 -07:00
misc.c tipc: add new commands to set TIPC AEAD key 2019-11-25 23:14:11 +00:00
misc.h tipc: add new commands to set TIPC AEAD key 2019-11-25 23:14:11 +00:00
msg.c tipc: change family attribute from u32 to u16 2017-11-16 15:58:48 -08:00
msg.h tipc: add new TIPC configuration tool 2015-05-21 14:41:41 -07:00
nametable.c tipc: fix misalignment printout in non-JSON output 2018-12-07 09:24:01 -08:00
nametable.h tipc: add new TIPC configuration tool 2015-05-21 14:41:41 -07:00
node.c tipc: add option to set rekeying for encryption 2020-10-20 09:04:45 -06:00
node.h tipc: add new TIPC configuration tool 2015-05-21 14:41:41 -07:00
peer.c tipc: support 128bit node identity for peer removing 2020-09-01 20:01:39 -06:00
peer.h tipc: add peer remove functionality 2016-08-29 10:33:24 -07:00
README tipc: add new TIPC configuration tool 2015-05-21 14:41:41 -07:00
socket.c tipc: change node address printout formats 2018-03-28 20:41:15 -07:00
socket.h tipc: add new TIPC configuration tool 2015-05-21 14:41:41 -07:00
tipc.c build: fix build failure with -fno-common 2020-01-20 09:40:59 -08:00

DESIGN DECISIONS
----------------

HELP
~~~~
--help or -h is used for help. We do not reserve the bare word "help", which
for example the ip command does. Reserving a bare word like help quickly
becomes cumbersome to handle in the code. It might be simple to handle
when it's passed early in the command chain like "ip addr help". But when
the user tries to pass "help" further down this requires manual checks and
special treatment. For example, at the time of writing this tool, it's
possible to create a vlan named "help" with the ip tool, but it's impossible
to remove it, the command just shows help. This is an effect of treating
bare words specially.

Help texts are not dynamically generated. That is, we do not pass datastructures
like command list or option lists and print them dynamically. This is
intentional. There is always that exception and when it comes to help texts
these exceptions are normally neglected at the expence of usability.

KEY-VALUE
~~~~~~~~~
All options are key-values. There are both drawbacks and benefits to this.
The main drawback is that it becomes more to write for the user and
information might seem redundant. The main benefits is scalability and code
simplification. Consistency is important.

Consider this.
1. tipc link set priority PRIO link LINK
2. tipc link set LINK priority PRIO

Link might seem redundant in (1). However, if the command should live for many
years and be able to evolve example (2) limits the set command to only work on a
single link with no ability to extend. As an example, lets say we introduce
grouping on the kernel side.

1. tipc link set priority PRIO group GROUP
2. tipc link set ??? priority PRIO group GROUP

2. breaks, we can't extend the command to cover a group.

PARSING
~~~~~~~
Commands are single words. As an example, all words in "tipc link list" are
commands. Options are key-values that can be given in any order. In
"tipc link set priority PRIO link LINK" "tipc link set" are commands while
priority and link are options. Meaning that they can be given like
"tipc link set link LINK priority PRIO".

Abbreviation matching works for both command and options. Meaning that
"tipc link set priority PRIO link LINK" could be given as
"tipc l s p PRIO l LINK" and "tipc link list" as "tipc l l".

MEMORY
~~~~~~
The tool strives to avoid allocating memory on the heap. Most (if not all)
memory allocations are on the stack.

RETURNING
~~~~~~~~~
The tool could throw exit() deep down in functions but doing so always seems
to limit the program in the long run. So we output the error and return an
appropriate error code upon failure.