Problem with ipfw table add 0.0.0.0/8

Alexander V. Chernikov melifaro at FreeBSD.org
Sat May 17 15:25:24 UTC 2014


On 17.05.2014 19:14, Andreas Nilsson wrote:
>
>
>
> On Sat, May 17, 2014 at 3:44 PM, Alexander V. Chernikov 
> <melifaro at freebsd.org <mailto:melifaro at freebsd.org>> wrote:
>
>     On 13.05.2014 16:05, Dennis Yusupoff wrote:
>
>         I think that universal table for all kind of data (ipv4, ipv6,
>         ports,
>         etc) is a bad idea by design. At least unless you haven't any
>         ability to
>
>     It is not always "universal" in kernel.
>     Actually, different radix tables are used to store both IPv4 and
>     IPv6 in single table.
>
>         specify address family on add, to avoid attempts to guess what
>         user
>         meant. Something like "ipfw table X add DEEF.DE
>         <http://DEEF.DE> ipv6".
>
>     I'm going to add explicit table type/naming setup soon.
>     Idea is the following:
>
>     1) Existing table can be named and addressed by either number or name.
>     However, you still need to assign table number manually.
>
>     2) Table type/name can be specified explicitly via one of the
>     following commands:
>     * ipfw table 1 create [type <cidr|u32|ifindex|iface>] [name
>     "table_name"]
>     * ipfw table <num|name> name "table_name"
>     * ipfw table "table_name" type <cidr|u32|ifindex|iface>
>
>     3) ipfw(8) stops trying to guess appropriate type based on used
>     value. Instead,
>     it requests table type from kernel and interprets value according
>     to returned type.
>     Default type for all tables is cidr
>
>     4) Table(s) can be returned to default values using ipfw table
>     <num|all|name> destroy.
>     Destroy means:
>     * flush
>     * table tries (or other structures) freed
>     * type set to cidr
>
>
>
>
>
>         13.05.2014 14:32, Alexander V. Chernikov пишет:
>
>             On 13.05.2014 13:46, Dennis Yusupoff wrote:
>
>                 May be this will help? See answer on
>                 http://www.freebsd.org/cgi/query-pr.cgi?pr=bin/189471
>
>             I'll try to fix it within a few days.
>
>     Fixed in r266310.
>
> With all of these changes, would it be possible to get tablearg to 
> store ipv6 as well? I seem to remember it is 32bit only today.
Well, I'd prefer not to increase tablearg directly.
It is probably possible to implement some kind of "nexthop" table adds 
additional auto-filled nexthop array.
>
> Best regards
> Andreas



More information about the freebsd-net mailing list