netdev - Netchanel netfilter usage example.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20061229144218.GA32638@2ka.mipt.ru>
Date:	Fri, 29 Dec 2006 17:42:18 +0300
From:	Evgeniy Polyakov <johnpol@....mipt.ru>
To:	netdev@...r.kernel.org
Subject: Netchanel netfilter usage example.

On Fri, Dec 29, 2006 at 05:35:27PM +0300, Evgeniy Polyakov (johnpol@....mipt.ru) wrote:
> * netfilter netchannel backend (only NAT is supported as the most interesting
>   user, NAT caches appropriate route, so essentially routing becomes part
>   of the netchannel trie)

Source NAT example:

connctl -p 6-6 -t 0 -T 10.0.0.1 -s 192.168.0.0-255.255.248.0 -d
10.0.0.0-255.255.255.0 -S 80-80 -D 1234-1234

which is equivalent to

iptables -t nat -I POSTROUTING -p tcp -s 192.168.0.0/21 -d 10.0.0.0/24
--sport 80 --dport 1234 -j SNAT --to-source 10.0.0.1

Netchannels scale easily to tens of thousands entries, userspace test
showed scaling to millions of entries (consider system with one million
of netfilter rules or at least sockets).

-- 
	Evgeniy Polyakov
-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html