On Fri, Dec 29, 2006 at 05:35:27PM +0300, Evgeniy Polyakov ([EMAIL PROTECTED])
wrote:
> * netfilter netchannel backend (only NAT is supported as the most interesting
> user, NAT caches appropriate route, so essentially routing becomes part
> of the netchannel trie)
Source NAT example:
connctl -p 6-6 -t 0 -T 10.0.0.1 -s 192.168.0.0-255.255.248.0 -d
10.0.0.0-255.255.255.0 -S 80-80 -D 1234-1234
which is equivalent to
iptables -t nat -I POSTROUTING -p tcp -s 192.168.0.0/21 -d 10.0.0.0/24
--sport 80 --dport 1234 -j SNAT --to-source 10.0.0.1
Netchannels scale easily to tens of thousands entries, userspace test
showed scaling to millions of entries (consider system with one million
of netfilter rules or at least sockets).
--
Evgeniy Polyakov
-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at http://vger.kernel.org/majordomo-info.html
