On 6/5/2015 11:53 AM, Simon Hobson wrote:
> Jean-Marc Liotier <[email protected]> wrote:
>
>> So, if I don't misunderstand, all the IPv6 packets ultimately end up as 
>> a a single sub-tree of whichever class the IPv4 protocol 41 packet is 
>> classified in. Hmmm... Not what I want... But I guess that it is a 
>> structural limitation of having IPv6 going through its own interface.
> AIUI that's correct.
>
> I wonder if it's possible to route traffic via an IFB (a virtual interface) 
> before the IP6 traffic goes into the tunnel (after it comes out of the tunnel 
> for inbound traffic). Adds complication and restrictions, but might allow 
> combined TC processing for IP4 and Ip6 together.
>

You might get uniform ingress control with an IBF but not egress.

-Tom

-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________


Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to