[lkml]   [2002]   [Oct]   [31]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: [PATCHSET] Mobile IPv6 for 2.5.43
In article <> (at Thu, 31 Oct 2002 12:44:00 +0200 (EET)), Henrik Petander <> says:

> > (2) Avoiding Netfilter Hooks
> > In your imprementation HA uses netfilter to intercept packets
> > sent to MN. We think it is costy so we have a suggestion to
> > use FIB structure to forward packets to MN. Bacause we think
> > forwarding packets from HA to MN is FORWARDING, not FILTERING.
> > We think the kernel maintainers may prefer such a manner using
> > FIB structure for forwarding.
> We are using standard routing in HA to route packets intercepted by HA to
> MN through a tunnel device. However, HA needs to also act as a neighbor
> discovery proxy for MN and not tunnel any ND packets destined to MN, but
> reply to them on the bahalf of MN. We use the netfilter hook to check for
> ND packets with global addresses that would be otherwise tunneled and feed
> them directly to the local processing code.

I believe that netfilter is not appropriate here.
If it is protocol requirement, do it in the stack itself.

Well, HA is router.

Sending side: Make mip6_forward().
When new MN is being registered, setup proxy ndisc and
make routes to MN via mip device (which is mip tunnel),
which actually calls mip6_foward().
When packet arrives, it checks MNs and forward it to it.
Receiving side:
mipl tunnel receives packets from MN.
check source address according to the list of MNs,
then forward it.

Also, I believe that the binding information should be hold as FIB entry.

To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
More majordomo info at
Please read the FAQ at

 \ /
  Last update: 2005-03-22 13:30    [W:0.069 / U:0.772 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site