On Mon, Apr 03, 2017 at 10:12:11PM +0800, Julian Elischer wrote: J> On 3/4/17 11:07 am, Andrey V. Elsukov wrote: J> > Author: ae J> > Date: Mon Apr 3 03:07:48 2017 J> > New Revision: 316435 J> > URL: https://svnweb.freebsd.org/changeset/base/316435 J> J> it was always my intention to hook netgraph modules into ipfw in this way
Yes, ng_tcpmss (written in 2004) and ng_ipfw (written in 2005) allow to do that. However, this comes with extra CPU cycles, and design flaws. Packet filter is functional and synchronous, while netgraph isn't. Coupling them requires hacks. So nothing wrong in ipfw module. -- Totus tuus, Glebius. _______________________________________________ svn-src-head@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/svn-src-head To unsubscribe, send any mail to "svn-src-head-unsubscr...@freebsd.org"
