Re: Policy routing idea (Was: ipfw: Would it be possible to continue processing rest of rules after match ?)

From: Luigi Rizzo (rizzo_at_icir.org)
Date: 06/22/05

  • Next message: Andre Oppermann: "Re: Policy routing idea (Was: ipfw: Would it be possible tocontinue processing rest of rules after match ?)" 
    Date: Wed, 22 Jun 2005 05:33:07 -0700
To: Ari Suutari <ari@suutari.iki.fi>

    On Wed, Jun 22, 2005 at 01:40:35PM +0300, Ari Suutari wrote:
    > Hi,
    >
    > Luigi Rizzo wrote:
    > > i suggest to implement a new action 'setnexthop' which stores the
    > > next hop as an MTAG with the packet (so it is preserved if the
    > > packet gets passed to dummynet).
    >
    > I took a quick look at how ipfw forward has been implemented.
    > It seems to use PACKET_TAG_IPFORWARD to store routing info.
    > If I would implement "ipfw setnexthop" with a new MTAG it
    > would duplicate very much code already present for PACKET_TAG_IPFORWARD.

    yes i think you should reuse the tag, just add a new opcode so that
    the action is attach the mtag to the mbuf if not there yet
    (maybe override its content if you believe you could match multiple rules of
    this type) and then continue processing as in a 'count' action.

            cheers
            luigi

    > If I could reuse the same MTAG this would be easier to add, all
    > that would be needed is a new opcode for ipfw (or am I missing
    > something important ?)
    >
    > Ari S.
    > _______________________________________________
    > freebsd-net@freebsd.org mailing list
    > http://lists.freebsd.org/mailman/listinfo/freebsd-net
    > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"

  • Next message: Andre Oppermann: "Re: Policy routing idea (Was: ipfw: Would it be possible tocontinue processing rest of rules after match ?)"

    Relevant Pages