Tom Herbert <t...@herbertland.com> wrote: > RFC6296 doesn't work because it allows an invalid checksum to be sent > on wire relative to the addresses used on the wire. That means we > would lose CHECKSUM_UNNECESSARY for ILA which is way too big of a > performance hit.
Not following. I did not say you should use NPT instead of ILA. [..] > In any case, I did at one point create some netfilter targets for ILA > to do the translation correctly updating the checksum. While this > provided the required functionality, I couldn't get sufficient > performance. A specialized fixed length lookup table gets most of the > performance needed for ILA. I'm not following at all. Could you explain why you can't just 'relocate' your proposed implementation to netfilter/ipv6? F.e. I see no reason why you could not use a lookup table in a netfilter target (or nft expression, for that matter) ... ? Thanks, Florian -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
