On Fri, Dec 29, 2006 at 05:35:27PM +0300, Evgeniy Polyakov ([EMAIL PROTECTED]) wrote: > * netfilter netchannel backend (only NAT is supported as the most interesting > user, NAT caches appropriate route, so essentially routing becomes part > of the netchannel trie)
Source NAT example: connctl -p 6-6 -t 0 -T 10.0.0.1 -s 192.168.0.0-255.255.248.0 -d 10.0.0.0-255.255.255.0 -S 80-80 -D 1234-1234 which is equivalent to iptables -t nat -I POSTROUTING -p tcp -s 192.168.0.0/21 -d 10.0.0.0/24 --sport 80 --dport 1234 -j SNAT --to-source 10.0.0.1 Netchannels scale easily to tens of thousands entries, userspace test showed scaling to millions of entries (consider system with one million of netfilter rules or at least sockets). -- Evgeniy Polyakov - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html