Newbie question: is net.inet.ip.fastforwarding intended for routers only?

[Ruslan Ermilov]

On Sat, Jan 17, 2004 at 12:17:48PM +0800, Xin LI wrote:
> As title. To my imagination (I have taken a sight on the kernel networking
> code), the fastforwarding path is intended for routers only, so if I want
> some functionalities, for example, NAT, the fastforwarding is not useful,
> and my experiment shows that if I enable it, ipfilter's NAT will be broken.
> Am I right?
> 
> Thanks in advance!
> 
Worse.  From the inet(4) manpage,

: IPCTL_FASTFORWARDING  (ip.fastforwarding) Boolean: enable/disable the use
:                       of fast IP forwarding code.  Defaults to off.  When
:                       fast forwarding is enabled, IP packets are for-
:                       warded directly to the appropriate network inter-
:                       face with a minimal validity checking, which
:                       greatly improves the throughput.  On the other
:                       hand, they bypass the standard procedures, such as
:                       IP option processing and ipfirewall(4) checking.
:                       It is not guaranteed that every packet will be
:                       fast-forwarded.


Cheers,
-- 
Ruslan Ermilov
FreeBSD committer
ru at FreeBSD.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-net/attachments/20040117/ba15e68d/attachment.bin