[Bug 254577] [PATCH] pf: Implement the NAT source port selection of MAP-E Customer Edge

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Tue Apr 13 10:55:09 UTC 2021


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=254577

--- Comment #4 from commit-hook at FreeBSD.org ---
A commit in branch main references this bug:

URL:
https://cgit.FreeBSD.org/src/commit/?id=2aa21096c7349390f22aa5d06b373a575baed1b4

commit 2aa21096c7349390f22aa5d06b373a575baed1b4
Author:     Kurosawa Takahiro <takahiro.kurosawa at gmail.com>
AuthorDate: 2021-04-13 08:50:00 +0000
Commit:     Kristof Provost <kp at FreeBSD.org>
CommitDate: 2021-04-13 08:53:18 +0000

    pf: Implement the NAT source port selection of MAP-E Customer Edge

    MAP-E (RFC 7597) requires special care for selecting source ports
    in NAT operation on the Customer Edge because a part of bits of the port
    numbers are used by the Border Relay to distinguish another side of the
    IPv4-over-IPv6 tunnel.

    PR:             254577
    Reviewed by:    kp
    Differential Revision:  https://reviews.freebsd.org/D29468

 lib/libpfctl/libpfctl.c             | 24 ++++++++++
 lib/libpfctl/libpfctl.h             |  1 +
 sbin/pfctl/parse.y                  | 57 ++++++++++++++++++++++-
 sbin/pfctl/pfctl_parser.c           |  3 ++
 share/man/man5/pf.conf.5            | 24 +++++++++-
 sys/net/pfvar.h                     |  1 +
 sys/netpfil/pf/pf.h                 |  6 +++
 sys/netpfil/pf/pf_ioctl.c           | 40 ++++++++++++++++
 sys/netpfil/pf/pf_lb.c              | 65 ++++++++++++++++++++++----
 tests/sys/netpfil/pf/Makefile       |  1 +
 tests/sys/netpfil/pf/map_e.sh (new) | 91 +++++++++++++++++++++++++++++++++++++
 11 files changed, 303 insertions(+), 10 deletions(-)

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-pf mailing list