OpenSSG

File Release Notes and Changelog

Release Name: openssg-0.1s.tar.gz

Notes: This is the first release of OpenSSG. OpenSSG is an opensource implementation of Cisco Service Selection Gateway which is available on IOS devices with the required feature image. The implementation uses libipq for userspace packet inspection. Traffic flows of unauthenticated users are redirected to a SESM (Subscriber Edge Service manager), where they are authenticated by whatever means (could be an HTTP server with a database backend, or a telnet server). Upon authentication, the user is authenticated with a certain IP and this is sent to the SSG server (via a simple - currently insecure/unauthenticated - TCP connection). Currently, the only available service which can be provided is simple unintercepted access (without redirection), with a per-user timeout. Also, the configuration supports per-user or per-ip network/subnet SESM's (multiple sesm's), a feature which is not in the cisco implementation. There's planned support for: 1) ToS marking 2) next-hop manipulation (via source-routing) 3) idle-timeouts 4) monitoring ncurses interface 5) provision for accouting (bytes transfer etc), currently, accounting based on time can be implemented via whatever means on the SESM independantly (for example, using mysql/php).