Looking Glass


bgpd has a second "restricted" control socket
only allow for certain messages, namely, the "show" operations

running the httpd in a chroot (default on OpenBSD), a cgi can just call a bgpctl binary inside the chroot, giving the path to the socket and the commands
    /somewhere/bgpctl -s /log/bgpd.sock $commands

cgi is under development, should be ready soon