From owner-freebsd-net Fri Jun 29 4:59:26 2001 Delivered-To: freebsd-net@freebsd.org Received: from e028121.vtacs.vt.edu (e028121.vtacs.vt.edu [63.164.28.121]) by hub.freebsd.org (Postfix) with ESMTP id 2C31137B406 for ; Fri, 29 Jun 2001 04:59:24 -0700 (PDT) (envelope-from gaylord@e028121.vtacs.vt.edu) Received: by e028121.vtacs.vt.edu (Postfix, from userid 1000) id 6C3FB86DE; Fri, 29 Jun 2001 07:58:16 -0400 (EDT) Date: Fri, 29 Jun 2001 07:58:16 -0400 From: Clark Gaylord To: freebsd-net@freebsd.org Subject: Re: fastforwarding? Message-ID: <20010629075815.N55750@e028121.vtacs.vt.edu> References: <20010626093545.D49992@sunbay.com> <3B3AB4F8.184A2EFE@softweyr.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <3B3AB4F8.184A2EFE@softweyr.com>; from wes@softweyr.com on Wed, Jun 27, 2001 at 10:39:20PM -0600 Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Wed, Jun 27, 2001 at 10:39:20PM -0600, Wes Peters wrote: > Ruslan Ermilov wrote: > > On Mon, Jun 25, 2001 at 06:47:41PM -0400, Deepak Jain wrote: > > > ... > > > What does the fastforwarding option do that the normal forwarding option > > > doesn't? > > > > > See inet(4). > > The description there isn't very forthcoming. fastforwarding caches > the results of a route lookup for destination addresses that are not > on the local machine, and uses the cached route to short-circuit the > normal (relatively slow) route lookup process. The packet flows > directly from one layer2 input routine directly to the opposing > layer2 output routine without traversing the IP layer. I notice the man page points out that this prevents the use of ipfilter, etc. The first packet(s?) do get forwarded by the usual process (yes?), so does this imply that at least a "deny X" would still work (as the first packet would get denied and hence the cache does not get populated)? What are the limitations to ipfw and friends working right in conjunction with fastforwarding? Clark To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message