From owner-freebsd-net@FreeBSD.ORG Mon Jul 24 14:09:39 2006 Return-Path: <owner-freebsd-net@FreeBSD.ORG> X-Original-To: freebsd-net@freebsd.org Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B9DBA16A4DD for <freebsd-net@freebsd.org>; Mon, 24 Jul 2006 14:09:39 +0000 (UTC) (envelope-from zec@icir.org) Received: from xaqua.tel.fer.hr (xaqua.tel.fer.hr [161.53.19.25]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1A85843D45 for <freebsd-net@freebsd.org>; Mon, 24 Jul 2006 14:09:39 +0000 (GMT) (envelope-from zec@icir.org) Received: by xaqua.tel.fer.hr (Postfix, from userid 20006) id 252979B655; Mon, 24 Jul 2006 16:09:38 +0200 (CEST) X-Spam-Checker-Version: SpamAssassin 3.1.1 (2006-03-10) on xaqua.tel.fer.hr X-Spam-Level: X-Spam-Status: No, score=-4.4 required=5.0 tests=ALL_TRUSTED,BAYES_00 autolearn=ham version=3.1.1 Received: from [192.168.200.106] (zec2.tel.fer.hr [161.53.19.79]) by xaqua.tel.fer.hr (Postfix) with ESMTP id 07F399B64E; Mon, 24 Jul 2006 16:09:34 +0200 (CEST) From: Marko Zec <zec@icir.org> To: freebsd-net@freebsd.org Date: Mon, 24 Jul 2006 16:09:29 +0200 User-Agent: KMail/1.9.1 References: <7.0.1.0.2.20060721105813.0971ae90@lariat.net> <20060724090909.GB3412@uk.tiscali.com> In-Reply-To: <20060724090909.GB3412@uk.tiscali.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200607241609.30783.zec@icir.org> Cc: Brett Glass <brett@lariat.net>, Brian Candler <B.Candler@pobox.com> Subject: Re: Multiple NAT router X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org> List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>, <mailto:freebsd-net-request@freebsd.org?subject=unsubscribe> List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net> List-Post: <mailto:freebsd-net@freebsd.org> List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help> List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>, <mailto:freebsd-net-request@freebsd.org?subject=subscribe> X-List-Received-Date: Mon, 24 Jul 2006 14:09:39 -0000 On Monday 24 July 2006 11:09, Brian Candler wrote: > On Fri, Jul 21, 2006 at 11:13:47AM -0600, Brett Glass wrote: > > I have an application in which I'd like a FreeBSD router to have > > multiple, isolated LANS attached to it, each with the same address > > space. The FreeBSD box would take the place of multiple NAT routers. > > > > For example, I might want to have three internal Ethernet > > interfaces on the FreeBSD box. Each would be connected to a LAN > > whose internal addresses are 192.168.0.0/24. The FreeBSD box would > > do NAT for all of them, and of course they could not "see" one another. > > FreeBSD won't support this 'out of the box' - because of the problem that > you identified of having multiple NICs all with the same address range > assigned to them. > > There's a project called 'vimage' which adds a separate virtual forwarding > table per jail. This might work for you, although all the natd's "outside" > interfaces would need to sit on the same interface, and I don't know if it > can do that. Yes this should work with a virtualized stack - all the "outsied" interfaces in each jail / virtual stack could be simply bridged together using netgraph which is virtualization-agnostic, i.e. a global facility in the current implementation of "vimage". Of course a significant problem might be that the stack virtualization patches exist only for FreeBSD 4.x, but there's a very good chance that a formal project aimed at bringing vimage into sync with 6.x and -CURRENT could start shortly... Cheers, Marko > Otherwise - you can run multiple instances of FreeBSD under a virtual > machine environment like Xen or VMware, and bridge all the 'outside' > interfaces together onto the same NIC. > > Also - you may still end up with a separate outside IP per vimage or VM, so > maybe then you need another NAT instance to NAT all of those onto a single > IP address :-) > > Regards, > > Brian. > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"