From owner-freebsd-net@FreeBSD.ORG Sat Dec 4 16:52:30 2004 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B348B16A4CE for ; Sat, 4 Dec 2004 16:52:30 +0000 (GMT) Received: from c00l3r.networx.ch (c00l3r.networx.ch [62.48.2.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id 96B6A43D46 for ; Sat, 4 Dec 2004 16:52:29 +0000 (GMT) (envelope-from andre@freebsd.org) Received: (qmail 46136 invoked from network); 4 Dec 2004 16:43:08 -0000 Received: from unknown (HELO freebsd.org) ([62.48.0.53]) (envelope-sender ) by c00l3r.networx.ch (qmail-ldap-1.03) with SMTP for ; 4 Dec 2004 16:43:08 -0000 Message-ID: <41B1EB4E.78490459@freebsd.org> Date: Sat, 04 Dec 2004 17:52:30 +0100 From: Andre Oppermann X-Mailer: Mozilla 4.8 [en] (Windows NT 5.0; U) X-Accept-Language: en MIME-Version: 1.0 To: James References: <20041115222310.GA93130@scylla.towardex.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit cc: freebsd-net@freebsd.org Subject: Re: Initial review request for IPv6 Fast Forwarding and IP6STEALTH X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 Dec 2004 16:52:30 -0000 James wrote: > > Folks, > > Attached is initial code for ip6_fastforward() that I'm proposing for FreeBSD > 5.x. This code was written for an internally modified FreeBSD 4.9, however in > the next few weeks, I will be porting this into FreeBSD 5.3 tree and submit a > final draft for review back to freebsd-net here. However in the mean time, if > any experienced folks can feed any suggestions or critics for this code, I will > gladily appreciate your input and make necessary changes for the final draft. > > We have been testing this code on a core router in occaid.org IPv6 network for > a few days now, and so far we've had zero problems and so far is running very > stable. > > Few notes: > > o The code was again, made for 4.x, so currently does not use pfil. > However, final draft that will be submitted by me later will include > pfil_hooks. > > o In our internally modified 4.x kernel (where this code was written for > initially), packets destined to router itself is sent to lo0 interface > > Therefore we do not have any checks for "is packet destined to us" > in this code, however it is very simple to fix in KAME. I will make > this correction implemented in the final draft. > > Thank you for your time and suggestions in the mean time. Nice, needs some cleanup though. Once you have cleaned it up you can run it either through me or gnn@. He is more of a IPv6 fan than I am (in my book IPv6 is broken by design^TM). -- Andre