Re: [PATCH] multiple instances of ipfw(4)

2013-06-11 Thread Ermal Luçi
Hello Luigi, On Mon, Jun 10, 2013 at 7:30 PM, Luigi Rizzo wrote: > On Mon, Jun 10, 2013 at 06:52:01PM +0200, Ermal Lu?i wrote: > > On Mon, Jun 10, 2013 at 5:01 PM, Luigi Rizzo wrote: > ... > > > if i understand well, this has no runtime overhead as the ifp has > > > the index of the context it

Re: [PATCH] multiple instances of ipfw(4)

2013-06-10 Thread Ermal Luçi
On Mon, Jun 10, 2013 at 5:01 PM, Luigi Rizzo wrote: > > > > On Mon, Jun 10, 2013 at 3:30 PM, Ermal Luçi wrote: > >> Hello, >> >> reviving this old thread since i had time to bring the patch to FreeBSD 10 >> and unified the whole controlling under ipfw(8

Re: [PATCH] multiple instances of ipfw(4)

2013-06-10 Thread Ermal Luçi
Hello, reviving this old thread since i had time to bring the patch to FreeBSD 10 and unified the whole controlling under ipfw(8) binary. For reminder, the patch located at [1] provides multiple instances for ipfw(4). Basically you can control which interfaces belong to which context/ruleset to m

Re: [PATCH] multiple instances of ipfw(4)

2012-02-08 Thread Ermal Luçi
2012/2/8 Gleb Smirnoff : > On Tue, Jan 31, 2012 at 12:02:04PM +0100, Luigi Rizzo wrote: > L> if i understand what the patch does, i think it makes sense to be > L> able to hook ipfw instances to specific interfaces/sets of interfaces, > L> as it permits the writing of more readable rulesets. Right

Re: [PATCH] multiple instances of ipfw(4)

2012-02-02 Thread Ermal Luçi
On Tue, Jan 31, 2012 at 12:02 PM, Luigi Rizzo wrote: > On Mon, Jan 30, 2012 at 01:01:13PM +0100, Ermal Lu?i wrote: >> Hello, >> >> from needs on pfSense a patch for allowing multiple intances of >> ipfw(4) in kernel to co-exist was developed. >> It can be found here >> https://raw.github.com/bsdpe

Re: [PATCH] multiple instances of ipfw(4)

2012-01-31 Thread Ermal Luçi
On Mon, Jan 30, 2012 at 10:08 PM, Vadim Goncharov wrote: > Hi Ermal Lu?i! > > On Mon, 30 Jan 2012 13:01:13 +0100; Ermal Lu?i wrote about '[PATCH] multiple > instances of ipfw(4)': > >> from needs on pfSense a patch for allowing multiple intances of >> ipfw(4) in kernel to co-exist was developed.

Re: [PATCH] multiple instances of ipfw(4)

2012-01-30 Thread Ermal Luçi
On Mon, Jan 30, 2012 at 3:36 PM, Ivan Voras wrote: > On 30/01/2012 13:01, Ermal Luçi wrote: > >> Surely i know that this is not the best way to implement generically > > > ... probably, because it's similar to VNET... > It depends on the comparison. The same argument

[PATCH] multiple instances of ipfw(4)

2012-01-30 Thread Ermal Luçi
Hello, from needs on pfSense a patch for allowing multiple intances of ipfw(4) in kernel to co-exist was developed. It can be found here https://raw.github.com/bsdperimeter/pfsense-tools/master/patches/RELENG_9_0/CP_multi_instance_ipfw.diff It is used in conjuction with this tool https://raw.gith

[patch] ng_iface(4) and ports/net/mpd4 allow renaming of interfaces.

2008-04-16 Thread Ermal Luçi
Hello, the patches inlined give the ng_iface(4) and the mpd4 port the ability to rename its interfaces. IE if you create a new pppoe connection instead of the line new -i ng0 pppoe pppoe you can enter new -i pppoe0 pppoe pppoe so when mpd starts it will create an ngX interface with a ngX: hook a