Multiple NAT router

Brian Candler B.Candler at pobox.com
Tue Jul 25 12:40:30 UTC 2006


On Mon, Jul 24, 2006 at 09:17:37PM -0600, Brett Glass wrote:
> I've been noodling over this for two weeks now, and am thinking 
> that the easiest thing to do might be is map every address in each 
> "virtual" router to a unique address from FreeBSD's point of view 
> (i.e. 192.168.0.2 on LAN 1 becomes 10.0.0.2, while 192.168.0.2 on 
> LAN 1 becomes 10.0.1.2, etc.). The translation would be done by 
> "hooks" as close as possible to the interfaces, so FreeBSD's stack 
> wouldn't know it was being done.
> 
> All that would be needed in that case would be to do "dumb" address 
> translation at the interfaces -- transparently to FreeBSD -- just 
> before the packets entered and left.

One problem is managing the allocation of the translated addresses. But why
not do dumb mapping of IPv4 addresses to IPv6 ? That would let you have up
to 2^96 "virtual routers", and finally provide a reason for the IPv6 code to
exist :-)


More information about the freebsd-net mailing list