From owner-freebsd-net@FreeBSD.ORG Sat Oct 22 10:38:35 2005 Return-Path: X-Original-To: net@FreeBSD.org Delivered-To: freebsd-net@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9B66516A41F for ; Sat, 22 Oct 2005 10:38:35 +0000 (GMT) (envelope-from glebius@FreeBSD.org) Received: from cell.sick.ru (cell.sick.ru [217.72.144.68]) by mx1.FreeBSD.org (Postfix) with ESMTP id F11E243D45 for ; Sat, 22 Oct 2005 10:38:34 +0000 (GMT) (envelope-from glebius@FreeBSD.org) Received: from cell.sick.ru (glebius@localhost [127.0.0.1]) by cell.sick.ru (8.13.3/8.13.3) with ESMTP id j9MAcWa8033097 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 22 Oct 2005 14:38:32 +0400 (MSD) (envelope-from glebius@FreeBSD.org) Received: (from glebius@localhost) by cell.sick.ru (8.13.3/8.13.1/Submit) id j9MAcVwo033096; Sat, 22 Oct 2005 14:38:31 +0400 (MSD) (envelope-from glebius@FreeBSD.org) X-Authentication-Warning: cell.sick.ru: glebius set sender to glebius@FreeBSD.org using -f Date: Sat, 22 Oct 2005 14:38:31 +0400 From: Gleb Smirnoff To: Chris Dionissopoulos Message-ID: <20051022103831.GI59364@cell.sick.ru> References: <4353765C.4030802@freemail.gr> Mime-Version: 1.0 Content-Type: text/plain; charset=koi8-r Content-Disposition: inline In-Reply-To: <4353765C.4030802@freemail.gr> User-Agent: Mutt/1.5.6i Cc: net@FreeBSD.org Subject: Re: What's wrong with netgraph NG_FWD_NEW_DATA? X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Oct 2005 10:38:35 -0000 On Mon, Oct 17, 2005 at 01:01:00PM +0300, Chris Dionissopoulos wrote: C> Trying to split inbound traffic based on layer2 characteristics, C> i have create a new netgraph module(ng_l2split) using C> ng_vlan(4) as reference. The design and implementation is C> pretty simple as ng_vlan : C> C> xl0:upper C> | C> +---------+ C> | ng_l2split|-----ng0 (ng_eiface on ngeth0) C> +---------+ ( --- ng1,2,....) C> | C> xl0:lower C> C> ng_l2plit has 2 basic hooks as descriped in ng_vlan(4) man page: C> - downstream hook (attached to physical's "lower" ) C> - nomatch hook (attached to physical's "upper" ) C> C> and for every ng_eiface node you attach you must provide a C> mac address for filtering (later this will be automated). Uhmm, wouldn't it be simplier to use ng_bridge? ,-- ngeth0 (with MAC address X) / xl0:lower -- bridge \ `-- ngeth1 (with MAC address Y) -- Totus tuus, Glebius. GLEBIUS-RIPN GLEB-RIPE