From owner-freebsd-hackers Mon Apr 27 04:22:53 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id EAA17370 for freebsd-hackers-outgoing; Mon, 27 Apr 1998 04:22:53 -0700 (PDT) (envelope-from owner-freebsd-hackers@FreeBSD.ORG) Received: from labinfo.iet.unipi.it (labinfo.iet.unipi.it [131.114.9.5]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id EAA17332 for ; Mon, 27 Apr 1998 04:22:03 -0700 (PDT) (envelope-from luigi@labinfo.iet.unipi.it) Received: from localhost (luigi@localhost) by labinfo.iet.unipi.it (8.6.5/8.6.5) id LAA24888; Mon, 27 Apr 1998 11:41:33 +0200 From: Luigi Rizzo Message-Id: <199804270941.LAA24888@labinfo.iet.unipi.it> Subject: Re: RFC: IPFW/DIVERT change suggestion. To: julian@whistle.com (Julian Elischer) Date: Mon, 27 Apr 1998 11:41:33 +0200 (MET DST) Cc: hackers@FreeBSD.ORG In-Reply-To: from "Julian Elischer" at Apr 27, 98 03:39:17 am X-Mailer: ELM [version 2.4 PL23] Content-Type: text Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > > i think the most reasonable view of the "divert" process is to see > > it as a graph where a pkt is forwarded. So we need to associate ... > The trouble with this approach is that the filter program needs to be able > to specify where to go, as it might generate 2 packets from one incoming > > Also where would you store that information while the packet is out in > user-land? This what why I suggested keeping info in the kernel > for the last N packets (option 2). But I'm not crazy about that idea. i don't see the problem. In any case the pointer to the rule that you wanted to add to the mbuf header does the job nicely, it seems to me. > what about a filter that looks at packets and makes a decision to send it > back to one of 2 differnt rules? this is exactly it: one rule is the next in numeric order, the other one is the one specified by the rule. > How do your results look for incoming control? > what do you use for policy? (which sessions get what bandwidth?) dummynet was written for testing purposes, not for bw policing. But it has bounded size buffers so packets are dropped after a while. cheers luigi -----------------------------+-------------------------------------- Luigi Rizzo | Dip. di Ingegneria dell'Informazione email: luigi@iet.unipi.it | Universita' di Pisa tel: +39-50-568533 | via Diotisalvi 2, 56126 PISA (Italy) fax: +39-50-568522 | http://www.iet.unipi.it/~luigi/ _____________________________|______________________________________ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message