Every ENF Router Card comes with the HSS feature, allowing it to handle encryption while directing the encrypted traffic back into the gateway for transmission through another network device (Ethernet, LTE, ect).
|Figure 1: Data flow with WiFi||Figure 2: Data flow with HSS|
HSS requires the host to install a custom driver described in the section below. Once installed, this driver will automatically detect when the router card wants to direct traffic back into the host. The TCP traffic will follow all routing/iptables rules once directed back into the host.
Note: By default the router card will always connect over WiFi, and failing that will try HSS. There is currently no configuration to have the router card ignore a functional WiFi connection.
HSS requires a custom driver to be built and loaded. The preferred install method is using DKMS. Otherwise, the driver would have to be manually rebuilt every time the kernel is updated.
Xaptum maintains a Debian package for the HSS driver. Use the following steps to install it.
apt-key adv --keyserver keyserver.ubuntu.com --recv-keys c615bfaa7fe1b4ca echo "deb http://dl.bintray.com/xaptum/deb <dist> main" | sudo tee /etc/apt/sources.list.d/xaptum.list sudo apt-get update
Replace <dist> with your Debian distrobuation (Stretch, Buster, ect)
sudo apt-get install xaptum-hss-host
Systems that do not run Debian can still benefit from the management features that DKMS provides. DKMS will ensure that HSS is recompiled with new kernels and that future updates can be managed.
git clone firstname.lastname@example.org:xaptum/hss.git cd hss/host sudo ./dkms-install
If neither our APT repos or DKMS are available the module can be independently built and managed.
Note: Required packages: kernel-devel, git, build-essential, kernel-headers-$(uname -r), sudo
git clone email@example.com:xaptum/hss.git cd hss/host/src make sudo make install
Routing IPv6 traffic works the same as a non-HSS setup. However,
considerations will also have to be made to allow IPv4 traffic to be
routed through the secondary network device. The router card will send
IPv4 traffic to the ENF servers at