tor 2006-03-16 klockan 12:46 -0800 skrev Kamel A. Baba: > Thanks Henrik. That fixed my problem > I have 1 more question though. Which would you say is more efficient: > using the ip_wccp mod or the GRE interface. Any recommendation? No noticeable difference in performance, but the ip_gre works better with other subsystems of the kernel and is an officially supported Linux component. ip_gre also has the added benefit of being able to properly filter the traffic if configured correctly (should be a point-to-point GRE tunnel to your router, not a wildcard gre interface accepting GRE packets from anywhere). Meaning that if you use ip_gre then you know that what you are doing will continue working with kernel upgrades for a forseeable future, and that it will not get disturbed by other seemingly unrelated changes in the Linux kernel, while if you use ip_wccp then there is no such guarantees of any kind. Additionally if ip_gre is correctly configured you know there is a reasonable security on what traffic your system accepts, which can not be claimed with the ip_wccp module which blindly accepts anything without asking and more or less forces you to do the same. Regards Henrik
Attachment:
signature.asc
Description: Detta =?ISO-8859-1?Q?=E4r?= en digitalt signerad meddelandedel
