netmap, VALE and netmap pipes

Luigi Rizzo rizzo at iet.unipi.it
Wed Feb 19 04:57:06 UTC 2014


On Tue, Feb 18, 2014 at 1:04 AM, wishmaster <artemrts at ukr.net> wrote:

>
>
>
>  --- Original message ---
>  From: "Luigi Rizzo" <rizzo at iet.unipi.it>
>  Date: 17 February 2014, 22:50:02
>
>
>
> > On Mon, Feb 17, 2014 at 03:40:31PM -0500, Mike Tancsa wrote:
> > > On 2/17/2014 1:58 PM, Luigi Rizzo wrote:
> > > > On Mon, Feb 17, 2014 at 08:36:06PM +0200, wishmaster wrote:
> > > >>
> > > >> Thanks, prof. Luigi.
> > > >>
> > > >> As for me, netmap-ipfw is especially interesting. Would you like
> add some examples for userspace bundle of ipfw and dummynet. Because not
> all clear in README-file.
> > > >>
> > > >> E.g. I have classic router with 2 interfaces igb
> > > >
> > > > replace the "vale" ports with "netmap:igb0" and "netmap"igb1"
> > > > and off you go.
> > >
> > > Apart from the man pages, is there a repository of documentation and
> > > examples somewhere ?
> >
> > not really. but apart from the plumbing into the interfaces,
> > this is just the FreeBSD/head ipfw code with obvious features
> > disabled (e.g. there is no access to local sockets or address
> > lists or routing tables so things like 'me', 'uid xx', 'verrpath'
> > do not work).
>
>   Thus it is unable to use kipfw/dummynet in situation with multiple
> external interfaces due to
>  no access to routing tables?
>

actually the routing is done by a router, a firewall
just filters. So you could use this kipfw in a
transparent firewall bridge, or in front of the
host stack on a machine you want to protect.

And for the rest, my original email continued like this:

--> And it could definitely be improved to work on more interfaces,
--> become multithreaded etc, but this is an exercise that i hope
--> someone else will take over.

cheers
luigi



-- 
-----------------------------------------+-------------------------------
 Prof. Luigi RIZZO, rizzo at iet.unipi.it  . Dip. di Ing. dell'Informazione
 http://www.iet.unipi.it/~luigi/        . Universita` di Pisa
 TEL      +39-050-2211611               . via Diotisalvi 2
 Mobile   +39-338-6809875               . 56122 PISA (Italy)
-----------------------------------------+-------------------------------


More information about the freebsd-net mailing list