Virtual Isolated Network with Netgraph
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Fri, 09 Feb 2024 06:20:11 UTC
Hey all,
I had an itch for testing netgraph; comparing the performance of it next to
if_bridge/epair.
I however have come across a problem that I'm not sure how to resolve. I'm
hopeful someone knows.
I'd like to do the following:
+------------------+
| ng_eiface |
+------------------+
|
+------------------+
| ng_bridge |
+------------------+
|
+------------------+
| ng_eiface |
+------------------+
Seems simple enough. However, I don't want to dangle any of the nodes off
of a physical interface and want to keep the ngeth* and ng_bridge* devices
completely isolated and virtual. Eventually the thought is I'll stick each
ng_eiface into a separate jail and go about my merry way.
The above is easily accomplished with if_bridge and epair; I certainly
understand this.
This is just an exercise to replicate the capabilities of if_bridge/epair
with just netgraph.
Thoughts?
~Paul
--
__________________
:(){ :|:& };: