[HEADS UP!] IPFW Ideas: possible SoC 2008 candidate

Vadim Goncharov vadim_nuclight at mail.ru
Wed Mar 26 02:00:10 PDT 2008


Hi Julian Elischer! 

On Mon, 24 Mar 2008 10:53:44 -0700; Julian Elischer wrote about 'Re: [HEADS UP!] IPFW Ideas: possible SoC 2008 candidate':

> here are some of my ideas for ipfw changes:

> 1/ redo locking so that packets do not have to get locks on the 
> structure... I have several ideas on this

Currently the main need for locking arises for rule byte/packet counters. The
easiest short-term solution

> 2/ allow separate firewalls to be used at different parts of the 
> network stack (i.e allow multiple taboe sto co-exist)

Umm, could you explain it a little?..

> 3/ possibly keeping per CPU stats..

How that would be represented to user?

-- 
WBR, Vadim Goncharov. ICQ#166852181       mailto:vadim_nuclight at mail.ru
[Moderator of RU.ANTI-ECOLOGY][FreeBSD][http://antigreen.org][LJ:/nuclight]



More information about the freebsd-hackers mailing list