From owner-freebsd-net@FreeBSD.ORG  Sun Jun 15 12:01:07 2014
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id B84FDF89;
 Sun, 15 Jun 2014 12:01:07 +0000 (UTC)
Received: from sola.nimnet.asn.au (paqi.nimnet.asn.au [115.70.110.159])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 2AA972292;
 Sun, 15 Jun 2014 12:01:05 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by sola.nimnet.asn.au (8.14.2/8.14.2) with ESMTP id s5FC10QY065827;
 Sun, 15 Jun 2014 22:01:01 +1000 (EST)
 (envelope-from smithi@nimnet.asn.au)
Date: Sun, 15 Jun 2014 22:01:00 +1000 (EST)
From: Ian Smith <smithi@nimnet.asn.au>
To: Julian Elischer <julian@freebsd.org>
Subject: Re: ipfw table matching algorithm question
In-Reply-To: <539D70BB.70203@freebsd.org>
Message-ID: <20140615215526.U609@sola.nimnet.asn.au>
References: <CAHu1Y73LrdrWTZ4D_q=x67D3OdG9QpCy952-piwN0j6HRNsG9Q@mail.gmail.com>
 <539C9BD5.70302@FreeBSD.org> <539D70BB.70203@freebsd.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Cc: freebsd-net@freebsd.org, Michael Sierchio <kudzu@tenebras.com>
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net/>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 15 Jun 2014 12:01:07 -0000

On Sun, 15 Jun 2014 18:08:59 +0800, Julian Elischer wrote:
 > On 6/15/14, 3:00 AM, Alexander V. Chernikov wrote:
 > > On 14.06.2014 21:35, Michael Sierchio wrote:
 > > > Luigi -
 > > > 
 > > > Does table entry matching use a longest prefix match?
 > > I'm not Luigi, but the answer is "yes" anyway :)
 > 
 > this may be about to change, because tables are getting  a rewrite,
 > but IP-based tables use the same code that the routing tables use.

It'd be a bit anti-POLA for the longest prefix match behaviour to 
change, though, especially with some tablearg usage.  Alexander?

cheers, Ian