Date: Tue, 17 Dec 1996 07:13:21 +0100 (MET) From: Luigi Rizzo <luigi@labinfo.iet.unipi.it> To: julian@whistle.com (Julian Elischer) Cc: owensc@enc.edu, wangel@wgrobez1.remote.louisville.edu, dnex@access.digex.net, current@freebsd.org, stable@freebsd.org Subject: Re: IP masquerading (for a LAN, _not_ PPP) Message-ID: <199612170613.HAA03735@labinfo.iet.unipi.it> In-Reply-To: <32B5D2C4.41C67EA6@whistle.com> from "Julian Elischer" at Dec 16, 96 02:52:33 pm
next in thread | previous in thread | raw e-mail | index | archive | help
> FreeBSD 2.2 includes the feature "DIVERT SOCKETS" > these can be used in conjunction with the ipfw code to > create a translation feature. > > Use the 'divert' keyword with the Ipfw to divert a packet to > a 'divert socket' that is openned by the translation daemon. > the daemon monitors incoming packets and 'fiddles' the headers > accordingly. isn't it a bit expensive ? I mean, do all the packet go to userland where the daemon modifies them and then back to the kernel ? If this is the situation, it sounds like a significant overhead per packet, so you only want to do it at the slow side of a router. Luigi -----------------------------+-------------------------------------- Luigi Rizzo | Dip. di Ingegneria dell'Informazione email: luigi@iet.unipi.it | Universita' di Pisa tel: +39-50-568533 | via Diotisalvi 2, 56126 PISA (Italy) fax: +39-50-568522 | http://www.iet.unipi.it/~luigi/ _____________________________|______________________________________
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199612170613.HAA03735>