[Bug 229092] [pf] [pfsync] States created by route-to rules pfsynced without interface

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Sat Aug 18 22:51:53 UTC 2018


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=229092

--- Comment #9 from Kajetan Staszkiewicz <vegeta at tuxpowered.net> ---
I see only those fields free to be used:

struct pfsync_state {
        u_int8_t         __spare[2];
}

struct pfsync_state_peer {
        u_int8_t        pad[6];
}

None of them is enough to carry char ifname[IFNAMSIZ] information. I thought
interfaces maybe have some increasing ID which would fit into those bytes but I
can't find such thing. We could add such increasing ID to pfi_kif but that
would still be an opportunistic solution, working correctly only if two routers
have identical interfaces which were added in the same order. That might in
some situations be even harder to achieve than having identical ruleset as
required by the patch I proposed.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-pf mailing list