twamp-server.pfs(5)

okay so this is the File Formats Manual entry for twamp-server.pfs(5), and it's literally the pass-phrase store for the one-way latency server 💅

✨ NAME ✨

twamp-server.pfs — one-way latency server pass-phrase store 🎀

💖 DESCRIPTION 💖

okay bestie, the twamp-server.pfs file is where you keep the identity/pass-phrase pairs that twampd needs to authenticate users. The format of this file is described in the pfstore(1) manual page. Where does this file live? That's controlled by the -c option to twampd 🗂️✨

twampd uses symmetric AES keys for authentication. These keys are derived from a shared secret (the pass-phrase) using the PBKDF2 algorithm (RFC 2898) with an HMAC-SHA1 as the pseudorandom function 🔐💜

so therefore, the twping client must have access to the exact same pass-phrase that the twampd server uses. Both the client and the server need to derive the same AES key for authentication to work. It is important that the system administrator and end user ensure the pass-phrase is not compromised 🚨😭

If the twping client is able to authenticate using the identity and derived AES key, twampd will use the directives found in the twamp-server.limits file to map policy restrictions for this connection 👑🔥

🔐 SECURITY CONSIDERATIONS 🔐

the pass-phrases in the twamp-server.pfs file are not encrypted in any way. (They are simply hex encoded.) The security of these pass-phrases are completely dependent upon the security of the filesystem and the discretion of the system administrator 😭💀

🚧 RESTRICTIONS 🚧

Identity names are restricted to 80 characters. That's the limit, bestie — 80 and no more 📏💅

👀 SEE ALSO 👀

pfstore(1), twping(1), twampd(8), twamp-server.limits(5), and the http://e2epi.internet2.edu/owamp/ web site 🌐🦋

🫶 ACKNOWLEDGMENTS 🫶

This material is based in part on work supported by the National Science Foundation (NSF) under Grant No. ANI-0314723. Any opinions, findings and conclusions or recommendations expressed in this material are those of the author(s) and do not necessarily reflect the views of the NSF 🌈💖

cute sign-off: $Date$ says hi, and this whole page is twamp-server.pfs(5) — bye bestie, stay secure! 💖🎀