From owner-freebsd-net Thu Jun 8 7:40:32 2000 Delivered-To: freebsd-net@freebsd.org Received: from info.iet.unipi.it (info.iet.unipi.it [131.114.9.184]) by hub.freebsd.org (Postfix) with ESMTP id 7943137BFAC; Thu, 8 Jun 2000 07:40:15 -0700 (PDT) (envelope-from luigi@info.iet.unipi.it) Received: (from luigi@localhost) by info.iet.unipi.it (8.9.3/8.9.3) id QAA04240; Thu, 8 Jun 2000 16:39:36 +0200 (CEST) (envelope-from luigi) From: Luigi Rizzo Message-Id: <200006081439.QAA04240@info.iet.unipi.it> Subject: Re: HEADS UP- WF2Q and RED now available in -current In-Reply-To: from Robert Watson at "Jun 8, 2000 10:35:47 am" To: Robert Watson Date: Thu, 8 Jun 2000 16:39:36 +0200 (CEST) Cc: freebsd-net@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL61 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > Luigi, > > I was perusing your ip_dummynet web page, and noticed the following: ... > My impression was that, at the IP level, a pipe match resulted in packets > being reinserted into the ruleset following the pipe rule. With the it depends on how you configure net.inet.ip.fw.one_pass (also documented in that page). The default setting is to act as for bridging (and btw forcing one pass for bridging is just because i did not have the time to check that it works otherwise, but it really should). cheers luigi > BRIDGE implementation, this would behave exclusively (one pipe per packet) > as a pipe implies an accept, but in the non-BRIDGE implementation, it > would allow multiple pipes per packet. I.e., a packet will always get hit > by the last rule, will be hit by the first rule 33% of the time, and by > the second 50% of the time. As a result with IP level forwarding, 16.5% > of packets will hit all three pipes. > > Robert N M Watson > > robert@fledge.watson.org http://www.watson.org/~robert/ > PGP key fingerprint: AF B5 5F FF A6 4A 79 37 ED 5F 55 E9 58 04 6A B1 > TIS Labs at Network Associates, Safeport Network Services > > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-net" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message