Re: ipv6 and state matching

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 25 Mar 2003, Trever L. Adams wrote:

> > Last year I worked on the prototype of an unified conntrack code, but it
> > was never released. Unfortunately just conntrack doesn't seem to be enough
> > - one is tempted to implement NAPT etc. as well.
>
> What is NAPT? Do you mean NAT?  Why was yours never released?

Sorry, I meant NAT-PT.

I did not release the code because it was never finished. That was just a
prototype, alone for conntrack.

> > > Are there plans on doing state support?  Is it all that much more
> > > difficult?
> >
> > A straight porting is not so difficult, but that direction cannot be
> > followed because it would result in a severe code-duplication.
> > Unification takes a lot of time.
>
> Hmm, what is the desired route right now?  Are they wanting to just
> share code base (lots of ifdefs all over) or are they wanting to
> actually have the two code bases use the same binary object?

ifdefs would be simply unmanageable. Kisza tried to use macros, but
the required macro levels were too deep.

Same binary objects are preferred...

> If one object is desired, can you just use ipv6 structs (whatever ones
> are involved) in all cases, or should there be a flag and use pointers
> so that each connection uses the appropriate structres?

...but without a blind union of the data structures: it'd mean a horrid
waste of the memory.

> I am willing to give this a go, I think.  However, this would be my
> first "major" work in the kernel (I have only helped a bit with cipe
> before).  I am not sure how great it would be.

It's a big challenge.

Best regards,
Jozsef
-
E-mail  : kadlec@xxxxxxxxxxxxxxxxx, kadlec@xxxxxxxxxxxxxxx
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
          H-1525 Budapest 114, POB. 49, Hungary



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux