Netgraph question - multiple kernels

Julian Elischer julian at elischer.org
Tue Oct 27 23:41:55 UTC 2009


remodeler wrote:
> My understanding is that I can bind multiple machines running netgraph into
> one large netgraph, by using something like ng_ksocket nodes bound with a
> tunneling device.

you COULD do that, yes, but the two netgraphs are unaware of each other.

> 
> By doing this, is the restriction of one ng_ipfw node per netgraph global to
> all of the machines (one, and only one, ng_ipfw node)? 

no it's one per machine

> If the ng_ksocket nodes
> are connected to ng_bridges on both of the machines, will only relevant
> network traffic cross the link - or all network traffic? 

ng_bridge does MAC address filtering. it only sends no broadcast 
packets to teh link where it has seen packets coming from that mac 
address.


> Can I configure the
> link between the two machines so that I can directly connect a netgraph node
> on one machine to a node on the other, or must they communicate by the
> bridge-tunnel-tunnel-bridge structure?

You are sending the packet out of one netgraph and into another.


how you get the packet there is your business..   you could use two 
ng_ether nodes and use a dedicated ethernet as a low latency tunnel.


> 
> Thank you.
> _______________________________________________
> freebsd-net at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscribe at freebsd.org"



More information about the freebsd-net mailing list