From owner-freebsd-net Fri Jun 29 10:27: 4 2001 Delivered-To: freebsd-net@freebsd.org Received: from snipe.mail.pas.earthlink.net (snipe.mail.pas.earthlink.net [207.217.120.62]) by hub.freebsd.org (Postfix) with ESMTP id 268E037B403 for ; Fri, 29 Jun 2001 10:26:55 -0700 (PDT) (envelope-from matt-l@pacbell.net) Received: from fire (1Cust48.tnt1.pasadena.ca.da.uu.net [63.28.226.48]) by snipe.mail.pas.earthlink.net (EL-8_9_3_3/8.9.3) with SMTP id KAA07508; Fri, 29 Jun 2001 10:26:44 -0700 (PDT) Message-ID: <004801c100bf$c35d9c10$6503c23f@XGforce.com> Reply-To: "matt" From: "matt" To: "Clark Gaylord" , References: <20010626093545.D49992@sunbay.com> <3B3AB4F8.184A2EFE@softweyr.com> <20010629075815.N55750@e028121.vtacs.vt.edu> Subject: Re: fastforwarding? Date: Fri, 29 Jun 2001 10:19:33 -0700 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2314.1300 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org So look like the fastforward is done at the either input/output? the so called layer 2? ====================================== WWW.XGFORCE.COM The Next Generation Load Balance and Fail Safe Server Clustering Software for the Internet. ====================================== ----- Original Message ----- From: Clark Gaylord To: Sent: Friday, June 29, 2001 4:58 AM Subject: Re: fastforwarding? > On Wed, Jun 27, 2001 at 10:39:20PM -0600, Wes Peters wrote: > > Ruslan Ermilov wrote: > > > On Mon, Jun 25, 2001 at 06:47:41PM -0400, Deepak Jain wrote: > > > > ... > > > > What does the fastforwarding option do that the normal forwarding option > > > > doesn't? > > > > > > > See inet(4). > > > > The description there isn't very forthcoming. fastforwarding caches > > the results of a route lookup for destination addresses that are not > > on the local machine, and uses the cached route to short-circuit the > > normal (relatively slow) route lookup process. The packet flows > > directly from one layer2 input routine directly to the opposing > > layer2 output routine without traversing the IP layer. > > I notice the man page points out that this prevents the use of > ipfilter, etc. The first packet(s?) do get forwarded by the usual > process (yes?), so does this imply that at least a "deny X" would > still work (as the first packet would get denied and hence the > cache does not get populated)? What are the limitations to ipfw > and friends working right in conjunction with fastforwarding? > > Clark > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-net" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message