Freebsd 10.2 amd64 netmap ipfw
Archy Cho
archycho at gmail.com
Fri Oct 9 10:14:36 UTC 2015
Dear All
I wish to try the new netmap driver with IPFW2 and dummynet.
I have google around and could not find any documents of all steps to set a working filtering box.
I have recompile the kernel with the followings.
###########################################
cpu HAMMER
ident ROUTER
options DUMMYNET
options IPFIREWALL
options IPFIREWALL_DEFAULT_TO_ACCEPT
options IPDIVERT
device pf
device pflog
device pfsync
options ALTQ
options ALTQ_CBQ
options ALTQ_RED
options ALTQ_RIO
options ALTQ_HFSC
options ALTQ_CDNR
options ALTQ_PRIQ
options ALTQ_NOPCC
options TCP_SIGNATURE
options IPSEC
options IPSEC_FILTERTUNNEL
device cryptodev
device crypto
options HZ=1000
device carp
device netmap
###########################################
/etc/rc.conf as follow:
###########################################
firewall_enable="YES"
firewall_script="/etc/rc.firewall"
firewall_type="/etc/ipfw.conf"
firewall_quiet="YES"
firewall_logging_enable=“YES"
###########################################
/etc/ipfw.conf
###########################################
add 65535 pass ip from any to any
###########################################
with command ipfw show ,
###########################################
65535 369224 135934287 allow ip from any to any
###########################################
I have downloaded
https://github.com/luigirizzo/netmap/archive/master.zip <https://github.com/luigirizzo/netmap/archive/master.zip>
https://github.com/luigirizzo/netmap-ipfw/archive/next.zip <https://github.com/luigirizzo/netmap-ipfw/archive/next.zip>
and compiled with the command
make NETMAP_INC=/root/netmap-master/src
after getting kipfw , and try the command ,
./kipfw netmap:ix0 netmap:ix1
all connection lost with ix0 ( I just ping the connecting IP address )
ifconfig ix0
ix0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=8407bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4,TSO6,LRO,VLAN_HWTSO>
ether 00:1b:21:ba:89:50
inet 10.0.85.2 netmask 0xfffffffc broadcast 10.0.85.3
nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
media: Ethernet autoselect (10Gbase-SR <full-duplex>)
status: active
I think I must misunderstand something , could anyone send me advise?
Or any documents could help to build a NETMAP IPFW firewall box ?
Thanks all for kindly helping hands.
ArchyCho
More information about the freebsd-net
mailing list