k4m1Mar 12, 2025

Yet again working on my network stack implementation, and just..

I do not enjoy that Layer 2 has to care about stuff from Layer 3

Or that Layer 3 and 4 are/can be entangled with each other,

instead of all of them being able to just work independent of every other layer

 WEH

Show threaddmi 💽 Mar 12, 2025

@k4m1 wdym with l2 caring about l3? packet snooping for building ARP/switching tables?

hugs

Show threadk4m1Mar 12, 2025

@domi

That's whole another can of worms,

this complaint was just provoked by remembering that EtherType field in Ethernet frame is used to indicate type of protocol that'll follow x-x

So 0800 for ipv4, 0806 for arp, and so forth

Show threadalina🐾💖✨🏳️‍⚧️Mar 12, 2025
@k4m1 @domi oh god
Show threaddmi 💽 Mar 12, 2025
@alina @k4m1 you kinda don’t have any other way around this problem tho, it needs to be self-descriptive because as far as Ethernet is concerned, the frame can contain anything. if not for this ID field, you’d need to snoop and try to detect what each packet is x.x
Show threadErin 💽✨Mar 12, 2025
@domi @k4m1 @alina it's a pattern that repeats at every layer tbh. You need a dispatch point to select which of the next layer protocols will process the rest of the packet.

Now if you want to talk about ugly layering violations, meet my dishonourable friend IGMP/MLD snooping
Show threaddmi 💽 Mar 12, 2025

@erincandescent @k4m1 @alina the funny thing is that we designed systems to support a multitude of protocols. then we proceeded to only ever (commonly) use three of them (ARP, IPv4, IPv6)

but fear not! we designed IP to support a multitude of protocols too! and then we proceeded to only really use TCP and UDP. For an unwritten reason everything else has to match one of those now :))))

but fear not! we designed TCP/UDP to support a multitude of protocols too!!! and then we proceeded to block every port other than 80, 443 and 53, because everything is HTTP(S) or DNS now

but fear not! we designed^W slapped websockets on top of HTTP because THERE IS NO GOD

Show threadpostie 📗Mar 12, 2025
@[email protected] @k4m1 @alina @[email protected]
even DNS is sometimes done over HTTPS nowadays ​​
i can't wait to configure my firewall to block everything but port 443, the "internet port."
Show threadPatrysMar 13, 2025
@postie @erincandescent @k4m1 @alina @domi You need to block HTTPS because botnets now also use it for orchestration! /s
Show threadalways tired

@patrys @postie @erincandescent @k4m1 @alina @domi

Put all computers separated into blocks of concrete and dump them in the sea. Security win.

Mar 13, 2025 at 11:43pmWeb