Extending dummynet/ipfw

[Paul Joe]

Hi,

I have attached a patch which allows to do flow classifications in userland
(e.g based on url categories, LDAP users)
and do bandwidth control in kernel(dummynet).

The patch has

a) a setsocketopt, to associate a pipe to the socket.

b) an ipfw option(sockarg) to redirect flows to corresponding pipe.

Moreover, a member uint32_t is added to struct socket to hold the pipe info.

I guess this structure is not part of kernel userland ABI.

Please let me know your comments, which I would be glad to incorporate

Thanks,
Joe.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ipfwpatch
Type: application/octet-stream
Size: 5834 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-net/attachments/20100927/83f01db2/ipfwpatch.obj