tart-softnet/README.md

Softnet

Softnet is a software networking for Tart which provides better network isolation and alleviates DHCP shortage on production systems.

Working model

Softnet solves two problems:

1. VM network isolation

• VZNATNetworkDeviceAttachment (the default networking in Tart) enables vmnet's bridge isolation by default and prevents cross-VM traffic, however it's still possible for any VM to spoof the host's ARP-table and capture other VMs traffic, for example

2. DHCP exhaustion

• macOS built-in DHCP-server allocates a /24 subnet with 86400 seconds lease time by default, which only allows for ~253 VMs a day (or 1 VM every ~6 minutes) to be spawned without causing a denial-of-service, which is pretty limiting for CI services like Cirrus CI

And assumes that:

1. Tart gives it's VMs unique MAC-addresses
2. macOS built-in DHCP-server won't re-use the IP-addresses from it's pool until their lease expire

...otherwise it's possible for two VMs to receive an identical IP-address from the macOS built-in DHCP-server (even in the presence of Softnet's packet filtering) and thus bypass the protections offered by Softnet.

Installing

For proper functioning Softnet binary requires two things:

• a SUID-bit set which effectively gives it root privileges
  • this is needed in order to create vmnet.framework interface and perform DHCP-related tweaks
  • the privileges will be dropped once all of the initialization is completed
• to be available in PATH
  • so that the Tart will be able to find it

Running

Softnet is started and managed automatically by Tart if --with-softnet flag is present when calling tart run.