Shachar Shemesh wrote:
>
> Gilad Ben-Yossef wrote:
>
> > And once again I must say: "Don't think so 3rd layer, JeanLuke".
>
> I am not, number 1.
hehehe... I think in the moviwe it was the Borg Queen that said that ;-)
> > I was about to explain how to build a 2d level (OSI) bridiging proxy but
> > someone already did:
> > http://perso.wanadoo.fr/magpie/EtherDivert.html
> >
> > No extra hop, no need for another subnet, batteries not included...
>
> Oh, but you do add an extra hop. The fact that no IP protocol is aware of that does
> not change the fact that you now require all your traffic to be directed through
> your box. The box still acts as a router (actually, a bridge, but same difference),
> and the performance penalties are still being payed (though I have to admit that
> it's probably less of a penalty).
That's not so accurate. It is an extra hop if you consider "a hop" every
piece of networking equipment the packet (or Ethernet frame) passed on
it's merry way. But really - do you count the switches inside your LAN
as hops? for me a "hop" is really a router, something that decreases
TTL. A bridge is really not much then a repeater.
The work that is being done on a frame (which is not intended for the
Proxy) is much smaller with a bridge. In addition, you do not have to
"create" antoher subnet for the bridge, you don't have to to change the
router configuration for the bridge, you can replace the bridge with a
simply CAT5 cable in case of need and you can put a switch in paralel to
the bridge (giving it low STP priority) and get instant hot failover
solution without doing much.
In short - I understand why you say it is a hop, but the situation is
rather different from a "real" hop.
..which isn't quite relevant to the question wether you want to install
another machine or not just so the lusers can get their pr0n faster ;-)
--
Gilad Ben-Yossef <[EMAIL PROTECTED]>
http://kagoor.com | +972(9)9565333 x230 | +972(54)756701
"I've been seduced by the chocolate side of the force."
=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]
