netdev - Re: More complex PBR rules

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Mon, 8 Jul 2019 00:20:18 +0100
From:   "Markus Moeller" <huaraz@...ller.plus.com>
To:     <netdev@...r.kernel.org>, "David Ahern" <dsahern@...il.com>
Subject: Re: More complex PBR rules

Hi David,

  I read up about multipath routing and ecmp. It seems to do what I am 
looking for.

Thank you
Markus

-----Original Message----- 
From: David Ahern
Sent: Sunday, July 7, 2019 2:24 PM
To: Markus Moeller ; netdev@...r.kernel.org
Subject: Re: More complex PBR rules

On 7/6/19 5:06 PM, Markus Moeller wrote:
> Hi Network developers
>
> I am new to this group and wonder if you can advise how I could
> implement more complex PBR rules to achieve for example load balancing.
> The requirement I have is to route based on e.g. a hash like:
>
>  hash(src-ip+dst-ip) mod N  routes via  gwX    0<X<=N   ( load balance
> over N gateways )

Have you tried multipath routing? Does that not work for you?

>
>  This would help in situations where I can not use a MAC for identifying
> a gateway  ( e.g. in cloud environments) .
>
>   Could someone point me to the kernel source code where PBR is performed 
> ?
>

net/core/fib_rules.c