In article <[EMAIL PROTECTED]> (at Wed, 3 May 2006 22:07:40 +0400), Evgeniy Polyakov <[EMAIL PROTECTED]> says:
> > Even if the hardware cannot fully implement netfilter rules > > there is still value in having an interface that documents > > exactly how much filtering a given piece of hardware can do. > > There is no point in having the kernel repeat packet classifications > > that have already been done by the NIC. > > Please do not suppose that vj channel must rely on underlaying hardware. > New interface MUST work better or at least not worse than existing skb > queueing for majority of users, and I doubt users with netfilter capable > hardware are there. > It is only some hint to the SW, not rules, that hardware can provide. > The best would be ipv4/ipv6 hashing, and I think it is enough. And, I believe that, if a packet contains any ipv6 extension header(s), including routing header, fragmentation header, etc., we should process it in kernel as we do for now. Regards, --yoshfuji - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html
