Date: Sat, 24 Feb 2001 14:34:42 +0100 From: "Rogier R. Mulhuijzen" <drwilco@drwilco.nl> To: Julian Elischer <julian@elischer.org>, Satyajeet Seth <sseth@sasken.com> Cc: net@FreeBSD.ORG Subject: Re: Using netgraph to implement pseudo interfaces Message-ID: <4.3.2.7.0.20010224143232.00bff2d0@mail.bsdchicks.com> In-Reply-To: <3A910856.CE68FEAC@elischer.org> References: <Pine.GSO.4.30.0102171456150.21367-100000@suns3.sasi.com>
next in thread | previous in thread | raw e-mail | index | archive | help
> > I plan to design a netgraph as follows:
> >
> > iface1
> > /
> > fxp0 <-> bpf
> > \
> > iface2
>
>I forgot to add in my previous response that you'd have to do this like:
>
>fxp0: <--> bpf <--> bpf <--> interface0
> \ \
> \ ------>interface1
> \
> \------------>interface2
>
>as each bpfnode hook only selects between a
>"match" and "no match" hook.
>
>you could do it with one node as follows:
>
>
> +----------------------------+
> | |
> +->(hook2)[ ] |
>fxp0:(lower)<->(hook1)[bpf](nomatch1)----+
> [ ](match1)<-------->(upper)fxp0:
> [ ](nomatch2)<------>(hook)iface1:
> [ ](match2)<-------->(hook)iface2:
>
>i.e. loop the data back through the same node twice to effect two rules on
>the same data.
Or you could use the ALL mode in the one2many node. That way all incoming
traffic would reach all interfaces. Interfaces should still only accept
packets meant for themselves.
Or you the bridge node.
DocWilco
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4.3.2.7.0.20010224143232.00bff2d0>