[Etherboot-developers] RFC3118 An alternative to REQUIRE_VCI_ETHERBOOT

[Eric W B. <ebi...@ln...>]

I was skimming through the RFC's found RFC3118 ``Authentication for
DHCP Messages''  Which directly addresses the multiple DHCP server
problem that etherboot has, and is a standards track protocol.
Currently we do not support this, but it looks like a very good
alternative to VCI_ETHERBOOT, as it is not etherboot specific.

Currently two authentication methods are currently specified.
Configuration Token, and Delayed Authentication.  The Configuration
Token authentication method is just a magic string to identify good
DHCP servers, just like the VCI_ETHERBOOT variant except that it is
not etherboot specific.  The Delayed Authentication method gets delves
into the realm of secure network and is probably best left
unimplemented.

There are options to require use of the authentication protocol in the
ISC dhcp server but they are not currently implemented.

I don't know when the code will be written but long term this
definitely looks like the way to go.

Eric