From owner-freebsd-stable@FreeBSD.ORG  Wed Jun  9 10:51:54 2004
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 38B5516A4D0
	for <freebsd-stable@freebsd.org>;
	Wed,  9 Jun 2004 10:51:54 +0000 (GMT)
Received: from www.cotse.net (packetderm.com [68.166.125.227])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 73F5843D45
	for <freebsd-stable@freebsd.org>;
	Wed,  9 Jun 2004 10:51:53 +0000 (GMT)
	(envelope-from freebsd@jyroscop.cotse.net)
Received: from localhost (localhost[127.0.0.1])
        (authenticated bits=0)
        by www.cotse.net (5.7.4/5.7.4) with ESMTP id i59Apjc7012035;
        Wed, 9 Jun 2004 06:51:45 -0400 (EDT)
        (envelope-from freebsd@jyroscop.cotse.net)
Received: from 127.0.0.1
        by www.cotse.net with HTTP;
        Wed, 9 Jun 2004 06:51:45 -0400 (EDT)
Message-ID: <anlyb3Njb3A=.cb1aa28bfea6d06d0229e5b865179ec3@1086778305.dissimulo.com>
In-Reply-To: <40C6E171.50500@univale.br>
References: <40C6E171.50500@univale.br>
Date: Wed, 9 Jun 2004 06:51:45 -0400 (EDT)
From: "Stephen L Martin" <freebsd@jyroscop.cotse.net>
To: Marco =?iso-8859-1?Q?Ant=F4nio?= <mafbotelho@univale.br>
X-Abuse-To: abuse@dissimulo.com
MIME-Version: 1.0
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3
Importance: Normal
cc: freebsd-stable@freebsd.org
Subject: Re: Fastforwarding or forwarding?
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Production branch of FreeBSD source code
	<freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 09 Jun 2004 10:51:54 -0000

Hi Marco,

Taken from inet(4):

IPCTL_FASTFORWARDING  (ip.fastforwarding) Boolean: enable/disable the use
of fast IP forwarding code.  Defaults to off.  When fast forwarding is
enabled, IP packets are for-warded directly to the appropriate network
inter-face with a minimal validity checking, which greatly improves the
throughput.  On the other hand, they bypass the standard procedures, such
as
IP option processing and ipfirewall(4) checking. It is not guaranteed that
every packet will be fast-forwarded.

I think the bigger issue is that it bypasses firewall checks, so make sure
if you use this, not use it on a firewall.

-SLM


> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi!
>
> Which is the different between net.inet.ip.forwarding and
> net.inet.ip.fastforwarding? Do I have to use only one?
>
> I'm using the version 5.2.1-RC2.
>
> Thanks.
>
> ____________
> Marco Antônio
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.3 (FreeBSD)
> Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
>
> iD8DBQFAxuFxRFusWIXGT30RAmifAJ9ls8dVgoPtvK+Fd8hXxQTcB8Z3jQCfYcy+
> jn6BmsfixCIolJqMQN5i85E=
> =g5kB
> -----END PGP SIGNATURE-----