netdev - Re: More complex PBR rules

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Sun, 7 Jul 2019 07:24:40 -0600
From:   David Ahern <dsahern@...il.com>
To:     Markus Moeller <huaraz@...ller.plus.com>, netdev@...r.kernel.org
Subject: Re: More complex PBR rules

On 7/6/19 5:06 PM, Markus Moeller wrote:
> Hi Network developers
> 
> I am new to this group and wonder if you can advise how I could
> implement more complex PBR rules to achieve for example load balancing.
> The requirement I have is to route based on e.g. a hash like:
> 
>  hash(src-ip+dst-ip) mod N  routes via  gwX    0<X<=N   ( load balance
> over N gateways )

Have you tried multipath routing? Does that not work for you?

> 
>  This would help in situations where I can not use a MAC for identifying
> a gateway  ( e.g. in cloud environments) .
> 
>   Could someone point me to the kernel source code where PBR is performed ?
> 

net/core/fib_rules.c