On Fri, 21 Oct 2005, Shoebottom, Bryan wrote:
Henrik, One question I'd like a firm answer to, I have heard to install the ip_wccp module and not to. Which should I be doing?
The purpose of the ip_wccp module is to decapsulate those GRE packets carrying the redirected packets from the router, transforming them back to normal TCP/IP packets.
If your router is sending you plain packets then ip_wccp is not needed.
My understand is that the 2.6 kernel includes WCCP in the gre module.
Yes, since 2.6.9 or something like thath.
I also understand that the 2.4 kernel started to include it, but I'm not sure when.
Not that I know of. 2.4.31 does not.
With all of my testing, I have only been using the ip_gre module included in the kernel source.
ip_gre is generally preferred as it has at least a moderate level of security. ip_wccp is very insecure unless you properly firewall your server to not accept untrusted GRE traffic.
Regards Henrik
