Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 12 May 2006 22:50:10 +0700
From:      "Vadim Goncharov" <vadimnuclight@tpu.ru>
To:        "Luigi Rizzo" <rizzo@icir.org>, "Patrick Tracanelli" <eksffa@freebsdbrasil.com.br>
Cc:        freebsd-net@freebsd.org, freebsd-ipfw@freebsd.org
Subject:   Re: [patch] ipfw packet tagging
Message-ID:  <ops9f3lwis4fjv08@nuclight.avtf.net>
In-Reply-To: <20060512065327.B16302@xorpc.icir.org>
References:  <ops9fwnzbw17d6mn@nuclight.avtf.net> <44648E66.6010800@freebsdbrasil.com.br> <20060512065327.B16302@xorpc.icir.org>

next in thread | previous in thread | raw e-mail | index | archive | help
12.05.06 в 20:53 Luigi Rizzo в своём письме писал(а):

>> > I've tried Andrey Elsukov's ipfw "tag/tagged" patches from:
>> > http://butcher.heavennet.ru/patches/kernel/ipfw_tags/
>> >
>> > Tested on 5.5-PRERELEASE production server with moderate
>> > load - rock stable [I've also looked through the code - patch
>> > is small, so it simply can't be any bugs there ;)].
>> >
>> > Personally I very like the idea from original Andrey's letter
>>
>> I have tested on 6.1 and works fine too.
>>
>> Hope it gets commited. Very useful for altq/dummynet flexibility too.
>
> i would, however, like to have a bit more documentation in the patch,
> in particular:
>
> - a manpage patch describing how to use the thing, and also the
>   behaviour in in odd situations (e.g. what happens when we try to tag
>   a packet multiple times ? does the tag survive between the 'input'
>   and 'output' path of ipfw for routed packets, etc ?).

A question about features: is it worth adding functionality of matching
range of tags? For example:

ipfw add pass ip from any to any tagged 1-5,10,20

-- 
WBR, Vadim Goncharov



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?ops9f3lwis4fjv08>