SINGLESOCK - How much to strip away?
Eric S. Raymond
esr at thyrsus.com
Sat Jun 2 13:25:17 UTC 2018
Richard Laager via devel <devel at ntpsec.org>:
> On 06/01/2018 10:06 PM, Mark Atwood via devel wrote:
> > As I type and think more, I ask, "What does Chrony do?", and I look at
> > [https://chrony.tuxfamily.org/doc/3.3/chrony.conf.html]. It has a
> > "bindaddress" directive, which uses IP address, not interface name. And
> > only one bind address can be specified. It freely admits that that
> > means Chrony is not the correct solution for serving down multiple
> > controlled interfaces at once. Very simplifying, but not what we want.
> FWIW, for me, at least, the typical cases for daemons are:
> A) bind to localhost only (preferably at least ::1, else 127.0.0.1)
> B) bind to everything (with additional control happening in the kernel)
Agreed. This is my experience says is normal.
<a href="http://www.catb.org/~esr/">Eric S. Raymond</a>
My work is funded by the Internet Civil Engineering Institute: https://icei.org
Please visit their site and donate: the civilization you save might be your own.
More information about the devel