lkml.org 
[lkml]   [1999]   [Jun]   [30]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [PATCH] 2.2.10: 2-dir masquerading for single-interface port forwarding
On Tue, Jun 29, 1999 at 12:52:01PM -0400, Rolf Braun wrote:
> This patch adds a 2-dir (bidirectional) masquerading feature to the kernel
> so that connections can be set up directly through the kernel in which
> neither side sees the real IP of the other side. The intention of this
> patch is to provide a way to cleanly forward connections over a single
> interface using the accompanying masq_mbfw module, which is mfw modified
> to use the new code.
I'm currently digging your code, some remarks:
* The idea is good and doable.
* We should impact ip_masq input path very low, because IS the
common path taken by every input packet.
* Please #ifdef CONFIG_IP_MASQ_BIDI (or similar) for easier inclusion
(there are MANY core changes)
* Could you adapt your changes to patch below?

BTW I'm attaching a patch that provides
* double linked lists => fast deletion, neater code
Currently it depends on list "load" and MUST be fast
because it's called from timer.
* dest+source hashing by Julian Anastasov, improves port forwarding
Currently portfw a-like hashing uses just masq port: same hash=> long list.
* additional daddr-only hash (used by eg. John Hardin's masq VPN module)

Alan, Dave could you inject attached patch? (tested Ok under heavy load)

Thanks
--
-- Juanjo http://juanjox.kernelnotes.org/
... because there IS an OS that CAN follow your power
[unhandled content-type:application/x-gunzip]
\
 
 \ /
  Last update: 2005-03-22 13:52    [W:0.220 / U:0.044 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site