From owner-freebsd-arch@FreeBSD.ORG  Sat Dec 29 05:09:42 2007
Return-Path: <owner-freebsd-arch@FreeBSD.ORG>
Delivered-To: freebsd-arch@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 65C4716A418
	for <freebsd-arch@freebsd.org>; Sat, 29 Dec 2007 05:09:42 +0000 (UTC)
	(envelope-from gnn@neville-neil.com)
Received: from outbound0.mx.meer.net (outbound0.mx.meer.net [209.157.153.23])
	by mx1.freebsd.org (Postfix) with ESMTP id 5385013C469
	for <freebsd-arch@freebsd.org>; Sat, 29 Dec 2007 05:09:42 +0000 (UTC)
	(envelope-from gnn@neville-neil.com)
Received: from mail.meer.net (mail.meer.net [209.157.152.14])
	by outbound0.sv.meer.net (8.12.10/8.12.6) with ESMTP id lBT32Pih000379; 
	Fri, 28 Dec 2007 19:02:25 -0800 (PST)
	(envelope-from gnn@neville-neil.com)
Received: from minion.local.neville-neil.com
	(61.204.211.246.customerlink.pwd.ne.jp [61.204.211.246])
	by mail.meer.net (8.13.3/8.13.3/meer) with ESMTP id lBT32OIN095874;
	Fri, 28 Dec 2007 19:02:24 -0800 (PST)
	(envelope-from gnn@neville-neil.com)
Date: Sat, 29 Dec 2007 12:02:22 +0900
Message-ID: <m2hci2ursx.wl%gnn@neville-neil.com>
From: gnn@freebsd.org
To: Marko Zec <zec@tel.fer.hr>
In-Reply-To: <200712282040.30745.zec@tel.fer.hr>
References: <4772F123.5030303@elischer.org>
	<m2bq8bvsis.wl%gnn@neville-neil.com>
	<200712282040.30745.zec@tel.fer.hr>
User-Agent: Wanderlust/2.15.5 (Almost Unreal) SEMI/1.14.6 (Maruoka)
	FLIM/1.14.8 (=?ISO-8859-4?Q?Shij=F2?=) APEL/10.7 Emacs/22.1.50
	(i386-apple-darwin8.10.1) MULE/5.0 (SAKAKI)
MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka")
Content-Type: text/plain; charset=US-ASCII
Cc: FreeBSD Net <freebsd-net@freebsd.org>, Qing Li <qingli@freebsd.org>,
	Robert Watson <rwatson@freebsd.org>,
	Julian Elischer <julian@elischer.org>, freebsd-arch@freebsd.org
Subject: Re: resend: multiple routing table roadmap (format fix)
X-BeenThere: freebsd-arch@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Discussion related to FreeBSD architecture <freebsd-arch.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-arch>,
	<mailto:freebsd-arch-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-arch>
List-Post: <mailto:freebsd-arch@freebsd.org>
List-Help: <mailto:freebsd-arch-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-arch>,
	<mailto:freebsd-arch-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 29 Dec 2007 05:09:42 -0000

At Fri, 28 Dec 2007 20:40:30 +0100,
Marko Zec wrote:
> The thrust behind Julian's work seems to be providing multiple 
> forwarding tables for for purposes of traffic engineering / policy 
> based routing, with a single firewall instance used as a classifier.  
> vimage-style network stack virtualization provides for more strict 
> isolation on both port and IP address space, independent firewall 
> instances, IPSEC config / state etc., and as such might be better 
> suited for providing enhanced jail-style virtual hosting environments, 
> as well as for providing virtual router "slices".
> 
> So once we get Julian's multi-FIB stuff in the base system, I see no 
> reason why we couldn't have this functionality replicated in 
> each "vimage" instance, i.e. have multiple independent virtual 
> networking environnments, each with multiple FIBs.
> 
> Implementationwise, my hacks currently rely on macros for conditional 
> virtualization of global variables / structs.  As long as Julian's 
> changes continue to be unconditional, i.e. without playing a similar 
> macroization game, I think integrating this code (once it hits HEAD) 
> into p4/projects/vimage should be more or less a straightforward job.

Cool, that's what I wanted to hear.

Best,
George