On Wednesday 08 February 2006 20:12, Stephen Hemminger wrote:
> On Tue, 07 Feb 2006 16:26:01 -0800 (PST)
> "David S. Miller" <[EMAIL PROTECTED]> wrote:
> 
> > From: Stephen Hemminger <[EMAIL PROTECTED]>
> > Date: Tue, 7 Feb 2006 16:19:42 -0800
> > 
> > > Also, isn't a lot of the problem reduced if network devices
> > > are affinitied?
> > 
> > Not for routing/firewalling, we touch the destination device's
> > counters on input softing of the source device.
> 
> IMHO converting skb->dev to skb->devindex and using ifindex sounds best.
> It gets rid of the need to refcount as much but keeps the safety from
> buggy protocols.  Ipv6 could probably use ifindex as well.

But are you sure the hash table used for that would be strong enough to handle
the load?

And what happens when a ifindex is reused? Then packets could end up
on the wrong interface. That might be a security issue.

-Andi
-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to