kern/103454: [ipfw] [patch] add a facility to modify DF bit of the IP packet

[Thomas Vogt]

Hello


Roman Bogorodskiy schrieb:
>   Andrey V. Elsukov wrote:
> 
>> Roman Bogorodskiy wrote:
>>> +.It Cm setdf Ar value
>>> +Changes
>>> +.Cm DF
>>> +bit of the IP packet.
>>> +Value may be 0 (May Fragment) or 1 (Don't Fragment).
>> May be, it would be more handy make this feature via modifier
>> (not an action).
>> Rule format:
>>  <action> [setdf|resetdf] <rule body>
>>
>> Or more extensible, use not only DF modification:
>>  <action> [{modip [DF|TOS|DSCP|TTL]}] <rule body>
> 
> Yeah, that's nice idea. However, I have already working DF bit stuff and
> tos/dscp stuff as well (kern/102471) implemented in another way. And
> since committers don't seem to show intested in these
> patches/functionaliy, I'm not quite sure if I need to waste time on
> re-implementing it because it would be pretty useless if these patches
> would hang in GNATS forever.

I hope someone will commit it. DSCP/TOS feature in ipfw is pretty useful
if you're doing VOIP or QoS in generell.

The days where ISPs don't do QoS because they do erything with
"over-provesioning" are over. Most do MPLS QoS but thats more for the
backbone.

I would like to see this patch in the main tree. Of course the DF
modification would be nice too.

Cheers,
Thomas