Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 18 May 1996 15:32:55 -0700
From:      bmah@cs.berkeley.edu (Bruce A. Mah)
To:        Archie Cobbs <archie@whistle.com>
Cc:        terry@lambert.org (Terry Lambert), alk@think.com, questions@freebsd.org
Subject:   User-level packet munging (was Re: ip masquerading)
Message-ID:  <199605182232.PAA05259@premise.CS.Berkeley.EDU>
In-Reply-To: Your message of "Sat, 18 May 1996 01:24:18 PDT." <199605180824.BAA02382@bubba.whistle.com> 

next in thread | previous in thread | raw e-mail | index | archive | help
Archie Cobbs writes:

> There's a larger question here then, which is that we need a more
> general mechanism for user-land "filtering" (in the most general sense)
> of packets as they cross an interface. BPF and /dev/tun? are both
> great, but you can't implement a filter with them.
> 
> Firewalling, encryption, and accounting are examples too.

Let me plug a project by one of my colleagues, Eric Anderson.  The 
"Magic Router" is essentially this kind of mechanism...originally used 
for load balancing connections into a distributed computing cluster but 
applicable to all sorts of situations where you might want packets 
manipulated by a user-level process.  He built a prototype for L*nux, 
and it's being used (I think) as part of a research project here at UC 
Berkeley.  More info at:

http://http.cs.berkeley.edu/~eanders/262/

Bruce.






Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199605182232.PAA05259>