Re: Bridge Transparent Proxy

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 2007-05-22, Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx> wrote:
> On 05/22/07 13:36, Pascal Hambourg wrote:
>> I'm curious : why is a bridge needed for this ? Doesn't a simple router 
>> do the job as well ?
>
> No.
>
> Let me re-layout the network including IP addresses.
>
> (INet [A.B.C.Z]) --- (BRouter [A.B.C.D]) --- ([A.B.C.E] Server(s)
>                         [192.168.144.254] --- ([192.168.144.1-100])
>
> Here you can see that you have the same subnet of A.B.C.x on both sides 
> of the bridging router.  There is no good (read easy) way to have the 
> same subnet on multiple sides of a router short of double natting which 
> in and of its self is not easy to do on a singular box.
>
> So what you do is bridge the A.B.C.x traffic to both networks and route 
> the other subnet(s) as needed.
>
Or you switch on arp proxy on the public interface of router ;)

-- Petr



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux