Re: about the implement and design of the pfil interface

From: Max Laier (max_at_love2party.net)
Date: 08/18/05

  • Next message: John Baldwin: "Re: duplicate read/write locks in net/pfil.c and netinet/ip_fw2.c"
    To: freebsd-net@freebsd.org
    Date: Thu, 18 Aug 2005 18:06:42 +0200
    
    
    

    On Thursday 18 August 2005 14:02, shiner chen wrote:
    > Recently ,I read the code of the pfil interface was designed and
    > implemented by Matthew R. Green. I want to get the Diagram illustrating
    > the flow of TCP/IP packets through the various stages introduced by pfil
    > interface and the document about the implement and design of the
    > pfilinterface. Who can help me ? thanks!!

    In FreeBSD we only have pfil_hooks for IP level packets. While the
    instrumentation is there to provide other hook points with the pfil API it
    hasn't happend as it would result in performance degradation (at least one
    function call/memory read per hook point). Unless a specific application
    makes it worthwhile to add another hookup point, I don't think it's
    worthwhile to provide such. There is some work going on to provide L2 hooks,
    however.

    More information about FreeBSD's pfil implementation can be found in
    src/sys/net/pfil.? and the pfil(9) manpage.

    -- 
    /"\  Best regards,                      | mlaier@freebsd.org
    \ /  Max Laier                          | ICQ #67774661
     X   http://pf4freebsd.love2party.net/  | mlaier@EFnet
    / \  ASCII Ribbon Campaign              | Against HTML Mail and News
    
    



  • Next message: John Baldwin: "Re: duplicate read/write locks in net/pfil.c and netinet/ip_fw2.c"

    Relevant Pages

    • Re: option directive and turning on AOE
      ... >>make pfil have a netgraph hook. ... >>kinds of things in netgraph graphs. ... Thus IPSecKAME and FastIPSec could be loadable modules and it ...
      (freebsd-arch)
    • Re: option directive and turning on AOE
      ... >>Another option might be a PFIL hook. ... >>get most of the netgraph specific hooks out of the ethernet code. ... Thus IPSecKAME and FastIPSec could be loadable modules and it ...
      (freebsd-arch)