---
name: "libvdeplug_agno"
section: "1"
platform: "linux"
package: "libvdeplug-agno"
version: "0.1.1-1+b6"
release: "Debian 13 (Trixie)"
platforms: ["linux"]
url: "https://new.carta.tech/libvdeplug_agno"
---

# libvdeplug\_agno(1)

vdeplug module: add encryption to ethernet link plug

## NAME

**libvdeplug\_agno** - vdeplug module: add encryption to ethernet link plug

## SYNOPSIS

libvdeplug\_agno.so

## DESCRIPTION

This is a libvdeplug cryptographic module that implements agnostic encryption over layer 2. Agnostic encryption is an encryption method that doesn't need information about the vde network implementation.

This module of libvdeplug4 can be used in any program supporting vde like **vde\_plug**, **vdens**, **kvm**, **qemu**, **user-mode-linux** and **virtualbox**.

The vde\_plug\_url syntax of this module is the following:

      **agno://**\[*/path/of/keyfile*\]\[**\[***OPTIONS***\]**\]**{***vde nested url***}**

*/path/of/keyfile*, if present, must be an absolute path or a path relative to the user's home (e.g. **~/example/path**). If omitted the default path of the keyfile is **~/.vde\_agno\_key**. The keyfile must contain a 128-bit key in hexadecimal format. Only hexadecimal characters are considered in both uppercase and lowercase, all the others are ignored (e.g. white-spaces, newline characters, non-hexadecimal letters).

## OPTIONS

- **ethtype=***TYPE*

  define the type of the Ethernet frame of the encrypted packet. TYPE can be the an exadecimal number or:

-

  **copy**: same type of the non-encrypted packet

-

  **ipv4**: ipv4 type (0x0800)

-

  **ipv6**: ipv6 type (0x86dd)

-

  **rand**: random number as type. The random number will be generated for every Ethernet packet sent.

## EXAMPLES

**agno://{vde:///tmp/myswitch}**

agno uses the key stored in the default keyfile (~/.vde\_agno\_key) location to encrypt the traffic sent to the switch. The Ethernet frames have agno specific type (0xa6de) as type.

**agno:///tmp/my\_keyfile\[ethtype=copy\]{vde:///tmp/myswitch}**

agno uses the key stored in file /tmp/my\_keyfile to encrypt the traffic sent to the switch. The Ethernet frames will have the same type of the non-encrypted packet.

**vdens agno://\[ethtype=rand\]{vxvde://234.0.0.1}**

create a nanespace connected to a vxvde local area cloud. agno uses the key stored in the default keyfile (~/.vde\_agno\_key) location to encrypt the traffic sent to vxvde.

## NOTICE

Virtual Distributed Ethernet is not related in any way with www.vde.com ("Verband der Elektrotechnik, Elektronik und Informationstechnik" i.e. the German "Association for Electrical, Electronic & Information Technologies").

## SEE ALSO

[**vde\_plug**(1)](/vde_plug/1.md)

## AUTHOR

VirtualSquare. Project leader: Renzo Davoli