Date: Wed, 22 Jun 2005 14:53:46 +0200 From: Andre Oppermann <andre@freebsd.org> To: Luigi Rizzo <rizzo@icir.org> Cc: freebsd-net@freebsd.org Subject: Re: Policy routing idea (Was: ipfw: Would it be possible tocontinue processing rest of rules after match ?) Message-ID: <42B95F5A.DFF7F3C5@freebsd.org> References: <42B7B352.8040806@suutari.iki.fi> <20050621170649.B82876@xorpc.icir.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Luigi Rizzo wrote: > > On Tue, Jun 21, 2005 at 09:27:30AM +0300, Ari Suutari wrote: > > Hi, > > > > I sent this to ipfw mailing list some time ago, but > > got no response. I would like to adjust ipfw behaviour > > with fwd rules to make policy routing easier (ie. make > > it separete from filtering rules). I would just like > > some input if this makes any sense (or is possible at > > all with current design). > > i suggest to implement a new action 'setnexthop' which stores the > next hop as an MTAG with the packet (so it is preserved if the > packet gets passed to dummynet). Please don't store routing table pointers. All the locking due to pointers to route entries in random places makes SMP a pain a slows down routing table lookups. > But perhaps, rather than a specific next hop, maybe you want to > pass a reference to a different routing table instead ? We don't have any at the moment. -- Andre > cheers > luigi > > > >Currently the ipfw fwd rules work so that the packet > > >is accepted when fwd rule matches. > > > > > >Would it be possible just tag the packet with > > >information about next_hop and just continue processing the > > >rules ? This would make complex rulesets with policy-based > > >routing much simpler, since one could just have relevat > > >fwd statments at beginning of rule sets and then > > >filter the packets in usual way. > > > > Ari S. > > _______________________________________________ > > freebsd-net@freebsd.org mailing list > > http://lists.freebsd.org/mailman/listinfo/freebsd-net > > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?42B95F5A.DFF7F3C5>