Features that would be useful for data centers that use Whonix for providing anonymous machines.
Details
Nov 12 2016
For the record:
Oct 1 2016
I don't know. May work. Sounds rather difficult. At the moment I cannot even think this through. data center support currently is no focus to me. No prospective sponsor for this at the moment. And we don't have anyone who would actually implement this anyhow at the moment.
Sep 30 2016
Tests confirm that TBB on multi-WSs work without changing the static IP. Timesync on both VMs finishes successfully. TPO check reports the same IP in both TBB instances. The problems I see is Tor Button is confused and reports Tor is not working and New identity sometimes hangs with a "cannot connect to controlport to change IP"
From my tests in the other ticket:
Sep 25 2016
How does the original Whonix-Workstation know it is the original Whonix-Workstation and not number two or a clone?
Sep 24 2016
I messed that up. My last comment T239#10445 was an answer for T559 - please scratch my last comment.
There is the original WS with IP 10.152.152.11. Why not turn it into a DHCP server for any new clones added to the internal network?
Alternatively I think its fine if it runs on Workstation-zero where other new cloned WSs on the internal network can bootstrap from.
Why do we insist on running the server on the GW? It will always increase attack surface. Alternatively I think its fine if it runs on Workstation-zero where other new cloned WSs on the internal network can bootstrap from.
Mar 15 2016
The DHCP functionality in Libvirt can be customized to stop that harmful behavior as documented. A generic DHCP package will run into the problems described here however.
Mar 14 2016
This is a huge task. Reading all the protocol and protocol extensions.
Plus DHCP server documentation and possibly source code.
From what I see DHCP servers have their own DNS resolver set by default and pass queries recursively upstream if they cannot answer it for whatever reason.
Feb 24 2016
Aug 20 2015
Aug 19 2015
Apr 4 2015
Mar 20 2015
Can be done on gw with the iptables quota feature:
http://www.netfilter.org/documentation/HOWTO/netfilter-extensions-HOWTO-3.html#ss3.13
Won't become a standard feature. Optional. Anything that works for data center support.
Can be done on gw with the iptables quota feature:
http://www.netfilter.org/documentation/HOWTO/netfilter-extensions-HOWTO-3.html#ss3.13
Running a DHCP on the gateway is bad for many reasons.