Mandi! Grant Taylor In chel di` si favelave... > > Can you provide me some examples? Thanks. > Sure? > Add a veth interface (pair), bring the local one up, add an IP & subnet to > it, enable forwarding. Then on your remote system, add a route to the new > veth subnet via the eth0 IP. > The uncertainty above is that I doubt that this is what you're asking. Local? Remote? really i don't understand... > Please provide a hypothetical topology and I'll describe how it could be > implemented with network namespaces and veth pairs. (I don't know if you > are asking for an ifb alternative or something else.) Surely i ask for an IFB alternative... As stated, all my interfaces in firewall have egress shaped on the interface itself, while ingress are shaped into the companion ifb intrfaces. This work, but not effectively as i wakt, because ifb interfaces have not iptables/connmark and i can use only u32. Because veth interfaces comes 'in pair', if i can link my WAN interfaces to a veth pair, i can shape on egress on both interface, considering that egress of one interface is ingress for the other (eg, a pipe). It is possible? -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/ Polo FVG - Via della Bontà, 7 - 33078 - San Vito al Tagliamento (PN) marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797 Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA! http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000 (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
