From owner-freebsd-net@FreeBSD.ORG Tue Dec 9 18:06:53 2008 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 56AC11065670 for ; Tue, 9 Dec 2008 18:06:53 +0000 (UTC) (envelope-from aturetta@commit.it) Received: from mail.bestunion.it (mail.bestunion.it [85.18.201.87]) by mx1.freebsd.org (Postfix) with ESMTP id 9FD8A8FC14 for ; Tue, 9 Dec 2008 18:06:51 +0000 (UTC) (envelope-from aturetta@commit.it) Received: from [192.168.44.66] (adsl-ull-141-22.51-151.net24.it [151.51.22.141]) (authenticated bits=0) by mail.lan.bestunion.it (8.14.3/8.14.3) with ESMTP id mB9I6a9P070704 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 9 Dec 2008 19:06:45 +0100 (CET) (envelope-from aturetta@commit.it) Message-ID: <493EB3A7.40108@commit.it> Date: Tue, 09 Dec 2008 19:06:31 +0100 From: Angelo Turetta User-Agent: Thunderbird 2.0.0.18 (Windows/20081105) MIME-Version: 1.0 To: Julian Elischer References: <493E66BD.6090907@commit.it> <493EAB8F.7090509@elischer.org> In-Reply-To: <493EAB8F.7090509@elischer.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: ClamAV version 0.94.2, clamav-milter version 0.94.2 on mail.bestunion.it X-Virus-Status: Clean Cc: freebsd-net@freebsd.org Subject: Re: Multiple routing table clarification X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Dec 2008 18:06:53 -0000 Julian Elischer wrote: > Angelo Turetta wrote: >> - is it possible for a single process to listen for TCP connections >> using more than one socket, each with its own 'fib'? > > yes, but only if you have source. you need to do a > setsockopt(SOO_SETFIB,...) on each socket before you do the listen(). > Otherwise all socekts from the same process get the same fib. OK, shouldn't be too hard to hack squid for this. > HOWEVER I have been asked to add a feature where setting a fib of -1 > on a socket will allow it to get its fib from the incoming SYN packet.. > Ithink that would bewhat you are asking for. Yes, please! It would be much more general-purpose than hacking squid, of course if -1 be supported by setfib too... I can help test a patch on RELENG_7, whenever "someone" writes it ;-) Thanks a lot, Angelo Turetta