Date: Mon, 05 Feb 2001 21:32:16 -0800 From: Julian Elischer <julian@elischer.org> To: Rich Wales <richw@webcom.com> Cc: Luigi Rizzo <rizzo@aciri.org>, patrick@netzuno.com, freebsd-net@FreeBSD.ORG, julian@FreeBSD.ORG Subject: Re: BRIDGE breaks ARP? (more info) Message-ID: <3A7F8C60.D0AA954B@elischer.org> References: <20010205215641.59637.richw@wyattearp.stanford.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
Rich Wales wrote: > > Luigi Rizzo wrote: > > > it looks like it essentially reverts to the old (1.75) behaviour, > > . . . when bridging is compiled in (and now, when bridging is > > enabled), arp requests do not consider the interface from which > > the request came from. . . . there are some cases where you are > > doing bridging separately on clusters of interfaces, . . . > > In my case, I want to maintain two distinct clusters on my bridge -- > one cluster with publicly accessible IP addresses (part of the Internet > at large), and another cluster with private IP addresses (for a local > network that is allowed to access the Internet only through proxies). > > If I implement Julian's mod in my bridge, am I going to run into > problems with misdirected ARP packets? Or should I be safe because > my two clusters are dealing with completely separate groups of IP > addresses (one external, the other internal)? the fix is to leave the behaviour as it was before in the case where bridging is enabled and to make it behave as if bridging is not compiled in when it is disabled. The behaviour in both these cases is defined by previous behaviour. If you want two totally separate bridged networks, then netgraph bridging already does that. Just define 2 bridge nodes and connect them to the appropriate interfaces. Instead of trying to fix the old bridging which was written when netgraph was not publically available (It was as good as could be done at the time, but it was like trying to fit a square peg into a round hole.... a hack at best) the same effort should be put into making netgraph bridging do what is needed by different people. it will be a lot easier and a lot more useful in the end. > > Rich Wales richw@webcom.com http://www.webcom.com/richw/ -- __--_|\ Julian Elischer / \ julian@elischer.org ( OZ ) World tour 2000-2001 ---> X_.---._/ v To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3A7F8C60.D0AA954B>