Multiple NAT router
Brian Candler
B.Candler at pobox.com
Tue Jul 25 12:40:30 UTC 2006
On Mon, Jul 24, 2006 at 09:17:37PM -0600, Brett Glass wrote:
> I've been noodling over this for two weeks now, and am thinking
> that the easiest thing to do might be is map every address in each
> "virtual" router to a unique address from FreeBSD's point of view
> (i.e. 192.168.0.2 on LAN 1 becomes 10.0.0.2, while 192.168.0.2 on
> LAN 1 becomes 10.0.1.2, etc.). The translation would be done by
> "hooks" as close as possible to the interfaces, so FreeBSD's stack
> wouldn't know it was being done.
>
> All that would be needed in that case would be to do "dumb" address
> translation at the interfaces -- transparently to FreeBSD -- just
> before the packets entered and left.
One problem is managing the allocation of the translated addresses. But why
not do dumb mapping of IPv4 addresses to IPv6 ? That would let you have up
to 2^96 "virtual routers", and finally provide a reason for the IPv6 code to
exist :-)
More information about the freebsd-net
mailing list