Re: iptables, conntrack, and the raw table vs. L3DSR

2016-09-10 Thread Quentin Barnes
Being unsuccessful at getting help so far, can anyone think of who or where else I could ask for help on this issue? On Sat, Aug 27, 2016 at 4:55 PM, Quentin Barnes wrote: > Several years ago, I wrote an iptables module that rewrites packets' > destination addresses based on the value in the DSCP

iptables, conntrack, and the raw table vs. L3DSR

2016-08-27 Thread Quentin Barnes
Several years ago, I wrote an iptables module that rewrites packets' destination addresses based on the value in the DSCP field to implement Layer 3 Direct Server Return (L3DSR). The main code of the iptables target module you can find here: https://github.com/yahoo/l3dsr/blob/master/linux/kmod-xt