Messages in this thread | | | Date | Wed, 30 Jun 1999 15:01:32 -0300 | From | Juanjo Ciarlante <> | Subject | Re: [PATCH] 2.2.10: 2-dir masquerading for single-interface port forwarding |
| |
On Tue, Jun 29, 1999 at 12:52:01PM -0400, Rolf Braun wrote: > This patch adds a 2-dir (bidirectional) masquerading feature to the kernel > so that connections can be set up directly through the kernel in which > neither side sees the real IP of the other side. The intention of this > patch is to provide a way to cleanly forward connections over a single > interface using the accompanying masq_mbfw module, which is mfw modified > to use the new code. I'm currently digging your code, some remarks: * The idea is good and doable. * We should impact ip_masq input path very low, because IS the common path taken by every input packet. * Please #ifdef CONFIG_IP_MASQ_BIDI (or similar) for easier inclusion (there are MANY core changes) * Could you adapt your changes to patch below?
BTW I'm attaching a patch that provides * double linked lists => fast deletion, neater code Currently it depends on list "load" and MUST be fast because it's called from timer. * dest+source hashing by Julian Anastasov, improves port forwarding Currently portfw a-like hashing uses just masq port: same hash=> long list. * additional daddr-only hash (used by eg. John Hardin's masq VPN module)
Alan, Dave could you inject attached patch? (tested Ok under heavy load)
Thanks -- -- Juanjo http://juanjox.kernelnotes.org/ ... because there IS an OS that CAN follow your power [unhandled content-type:application/x-gunzip] | |