linux-vrf-core — Mailing list for core developers

[linux-vrf-core] Migration from linux-vrf-0.100 to linux-vrf-0.900

[Kyung H. C. <dru...@ho...>]
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Re: [linux-vrf-core] linux-vrf 0.900 is released]

[James R. L. <jl...@mi...>]

Currently there is a hard limit of 8 VRFs (0-7).  While working out bugs I
have decided not to dynamically allocation all of the data structures required
to keep track of TCP, UDP, and raw sockets per VRF.

Until I make the conversion to dynamically allocating per VRF data you can
change the compile time limit by modifying VRF_MAX in
linux/include/linux/rtnetlink.h

On Wed, Sep 29, 2004 at 04:29:07PM +0200, Mats Ydeklew wrote:
> Hi,
> 
> I'm running this new 0.900 and are pleased with the functionality. Running
> FC2 with all of your rpm's. I migth have missed something but I can only
> create vrf 1-7 but no more. Is there any VRF limit? If so could it be
> tuned?
> 
> Thanks
> Mats
> 
> .
> > This release moves to kernel 2.6.8.1. It also does away with the
> 'vrfadm' util and uses netlink exclusively for configuration. The
> release re-organizes
> > the handling of UDP and TCP sockets. The result is that less code had to be
> > changed, which will hopefully correspond to less bugs. It also attempts
> to 'filter' information presented to processes that are associated to
> non-zero
> > VRFs.
> >
> > By using the 'chvrf' utility any process can be run 'in' a VRF. The
> aforementioned filtering will only allow the process to 'see' routes and
> interfaces that are assigned to the same VRF.
> >
> > This release also has the first attempt at adding VRF support to IPv6. It's
> > not complete, but it compiles and does not break when adding IPv6
> addresses.
> >
> > Goto
> > http://sourceforge.net/project/showfiles.php?group_id=37027&package_id=29310&release_id=271116
> to see the files available with this release.  All RPMS
> > are created for a Fedora Core 2 system.
> >
> > Check out http://linux-vrf.sourceforge.net/ for examples of howto use.
> >
> > --
> > James R. Leu
> > jl...@mi...
> >
> >
> > -------------------------------------------------------
> > This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
> Project Admins to receive an Apple iPod Mini FREE for your judgement on
> who ports your project to Linux PPC the best. Sponsored by IBM.
> > Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
> > _______________________________________________
> > linux-vrf-core mailing list
> > lin...@li...
> > https://lists.sourceforge.net/lists/listinfo/linux-vrf-core
> >
> 
> 
> 
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: IT Product Guide on ITManagersJournal
> Use IT products in your business? Tell us what you think of them. Give us
> Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more
> http://productguide.itmanagersjournal.com/guidepromo.tmpl
> _______________________________________________
> linux-vrf-core mailing list
> lin...@li...
> https://lists.sourceforge.net/lists/listinfo/linux-vrf-core

-- 
James R. Leu
jl...@mi...

Re: [linux-vrf-core] linux-vrf 0.900 is released]

[Mats Y. <ma...@yd...>]

Hi,

I'm running this new 0.900 and are pleased with the functionality. Running
FC2 with all of your rpm's. I migth have missed something but I can only
create vrf 1-7 but no more. Is there any VRF limit? If so could it be
tuned?

Thanks
Mats

.
> This release moves to kernel 2.6.8.1. It also does away with the
'vrfadm' util and uses netlink exclusively for configuration. The
release re-organizes
> the handling of UDP and TCP sockets. The result is that less code had to be
> changed, which will hopefully correspond to less bugs. It also attempts
to 'filter' information presented to processes that are associated to
non-zero
> VRFs.
>
> By using the 'chvrf' utility any process can be run 'in' a VRF. The
aforementioned filtering will only allow the process to 'see' routes and
interfaces that are assigned to the same VRF.
>
> This release also has the first attempt at adding VRF support to IPv6. It's
> not complete, but it compiles and does not break when adding IPv6
addresses.
>
> Goto
> http://sourceforge.net/project/showfiles.php?group_id=37027&package_id=29310&release_id=271116
to see the files available with this release.  All RPMS
> are created for a Fedora Core 2 system.
>
> Check out http://linux-vrf.sourceforge.net/ for examples of howto use.
>
> --
> James R. Leu
> jl...@mi...
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: YOU BE THE JUDGE. Be one of 170
Project Admins to receive an Apple iPod Mini FREE for your judgement on
who ports your project to Linux PPC the best. Sponsored by IBM.
> Deadline: Sept. 24. Go here: http://sf.net/ppc_contest.php
> _______________________________________________
> linux-vrf-core mailing list
> lin...@li...
> https://lists.sourceforge.net/lists/listinfo/linux-vrf-core
>

[linux-vrf-core] linux-vrf 0.900 is released

[James R. L. <jl...@mi...>]

This release moves to kernel 2.6.8.1. It also does away with the 'vrfadm'
util and uses netlink exclusively for configuration. The release re-organizes
the handling of UDP and TCP sockets. The result is that less code had to be
changed, which will hopefully correspond to less bugs. It also attempts to
'filter' information presented to processes that are associated to non-zero
VRFs.

By using the 'chvrf' utility any process can be run 'in' a VRF. The
aforementioned filtering will only allow the process to 'see' routes and
interfaces that are assigned to the same VRF.

This release also has the first attempt at adding VRF support to IPv6. It's
not complete, but it compiles and does not break when adding IPv6 addresses.

Goto http://sourceforge.net/project/showfiles.php?group_id=37027&package_id=29310&release_id=271116 to see the files available with this release.  All RPMS
are created for a Fedora Core 2 system.

Check out http://linux-vrf.sourceforge.net/ for examples of howto use.

--
James R. Leu
jl...@mi...

Re: [linux-vrf-core] Broadcast packet handling.

[James R. L. <jl...@mi...>]

I haven't seen this issue yet (then again I haven't tun DHCPD in a VRF yet).

Are you working at debugging the problem?

On Thu, Dec 04, 2003 at 09:24:16AM +0100, Clement MOREAU wrote:
> Hello, 
> 
> I am trying to run a dhcp server on a vrf interface and I am facing a
> strange problem.
> My dhcp server socket stops to receive packets after a certain amount of
> time.
> This socket is "special" because it has SO_REUSEADDR and SO_BROADCAST
> enabled, and has been SO_BINDTODEVICE'd to my vrf device. 
> It has also been SO_VRF'd to the right vrf number.
> 
> If I don't use SO_VRF to bind it to the good VRF, I must say that the
> socket still receive broadcast packets, but not the unicast ones (and it
> seems that it does not break after a certain amount of time).
> 
> I am using linux-vrf-0.100 with Jorge Boncompte patch to fix oops on
> startup, backported to linux 2.4.17 on mips.
> 
> If anyone has seen such problems, or if anyone knows leakage in
> broadcast handling, it may help ...
> 
> Thank you.
> 
> -- 
> Clement MOREAU <cle...@in...>
> Inventel -- http://www.inventel.fr
> 
> ****************************************************************************
> Ce message et ses pieces jointes contiennent des informations
> confidentielles.
> Il est etabli a l'intention exclusive de ses destinataires.
> Si vous n'en etes pas destinataire, merci de le detruire et d'en avertir
> immediatement l'expediteur.
> L'integrite de ce message ne pouvant etre garantie sur Internet, Inventel
> ne peut etre tenue responsable de son contenu.
> 
> This e-mail and its attachments are confidential and intended solely for the
> addressees.
> If you are not the intended recipient of this message, then please delete it
> and notify the sender.
> Since the integrity of this message cannot be guaranteed on the
> Internet, Inventel cannot therefore be considered responsible for
> its content.
> ****************************************************************************
> 
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by OSDN's Audience Survey.
> Help shape OSDN's sites and tell us what you think. Take this
> five minute survey and you could win a $250 Gift Certificate.
> http://www.wrgsurveys.com/2003/osdntech03.php?site=8
> _______________________________________________
> linux-vrf-core mailing list
> lin...@li...
> https://lists.sourceforge.net/lists/listinfo/linux-vrf-core

-- 
James R. Leu
jl...@mi...

Re: [linux-vrf-core] Port to mips processor (big endian)

[James R. L. <jl...@mi...>]

Sorry for not getting back to you sooner.  I've been away from my
'normal life' a couple of weeks now.

On Thu, Nov 27, 2003 at 02:43:56PM +0100, Clement MOREAU wrote:
> Hello, 
> 
> I am using an embedded system with big endian mips processor. It runs a
> 2.4.17 kernel (upgrade is NOT trivial). 
> 
> I am trying to get VRF working on this system, but I am facing some
> issues with locally generated packets (forwarded packets are OK). So I
> have some questions :
> 
> - is there a newer version than release 0.100 ? (cvs on sourceforge is
> empty, but i read about a version for 2.4.2x in mailing list)

There are changes above and beyond 0.100 but a formal release has not
been made.

> - did anybody tried to get VRF working on big endian system ? 

Not that I know of.  If you find the need for changes, please let me know.

> - did anybody backport vrf 0.100 for 2.4.17 kernel ? (is this a good
> idea, or should i try to use patch from old 0.004 release ? )

Hmmm.  I'm thinking back porting the latest changes will be the best
bet, but they will be non trivial.

> Thank you,

If you want to get the latest changes you will need to use p4.  You can see
how to access my personal archive by looking at:

http://mpls-linux.sf.net/

You will want to trim your 'view' to only include:

//depot/linux-vrf/...
//depot/vrf-kernel/...

> 
> -- 
> Clement MOREAU <cle...@in...>
> Inventel, PARIS
> 
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: SF.net Giveback Program.
> Does SourceForge.net help you be more productive?  Does it
> help you create better code?  SHARE THE LOVE, and help us help
> YOU!  Click Here: http://sourceforge.net/donate/
> _______________________________________________
> linux-vrf-core mailing list
> lin...@li...
> https://lists.sourceforge.net/lists/listinfo/linux-vrf-core

-- 
James R. Leu
jl...@mi...

[linux-vrf-core] Broadcast packet handling.

[Clement M. <cle...@in...>]

Hello, 

I am trying to run a dhcp server on a vrf interface and I am facing a
strange problem.
My dhcp server socket stops to receive packets after a certain amount of
time.
This socket is "special" because it has SO_REUSEADDR and SO_BROADCAST
enabled, and has been SO_BINDTODEVICE'd to my vrf device. 
It has also been SO_VRF'd to the right vrf number.

If I don't use SO_VRF to bind it to the good VRF, I must say that the
socket still receive broadcast packets, but not the unicast ones (and it
seems that it does not break after a certain amount of time).

I am using linux-vrf-0.100 with Jorge Boncompte patch to fix oops on
startup, backported to linux 2.4.17 on mips.

If anyone has seen such problems, or if anyone knows leakage in
broadcast handling, it may help ...

Thank you.

-- 
Clement MOREAU <cle...@in...>
Inventel -- http://www.inventel.fr

****************************************************************************
Ce message et ses pieces jointes contiennent des informations
confidentielles.
Il est etabli a l'intention exclusive de ses destinataires.
Si vous n'en etes pas destinataire, merci de le detruire et d'en avertir
immediatement l'expediteur.
L'integrite de ce message ne pouvant etre garantie sur Internet, Inventel
ne peut etre tenue responsable de son contenu.

This e-mail and its attachments are confidential and intended solely for the
addressees.
If you are not the intended recipient of this message, then please delete it
and notify the sender.
Since the integrity of this message cannot be guaranteed on the
Internet, Inventel cannot therefore be considered responsible for
its content.
****************************************************************************

[linux-vrf-core] Port to mips processor (big endian)

[Clement M. <cle...@in...>]

Hello, 

I am using an embedded system with big endian mips processor. It runs a
2.4.17 kernel (upgrade is NOT trivial). 

I am trying to get VRF working on this system, but I am facing some
issues with locally generated packets (forwarded packets are OK). So I
have some questions :

- is there a newer version than release 0.100 ? (cvs on sourceforge is
empty, but i read about a version for 2.4.2x in mailing list)

- did anybody tried to get VRF working on big endian system ? 

- did anybody backport vrf 0.100 for 2.4.17 kernel ? (is this a good
idea, or should i try to use patch from old 0.004 release ? )

Thank you,

-- 
Clement MOREAU <cle...@in...>
Inventel, PARIS

Re: [linux-vrf-core] [PATCH] vrf-kernel netlink patch

[James R. L. <jl...@mi...>]

Thank you.  I have applied your patch.

On Fri, Oct 10, 2003 at 07:21:22PM +0200, Alex Peuchert wrote:
> Hi James,
> I added rudimentary rtnetlink support for VRF adding and removing to the
> vrf-kernel. I saw that you updated the kernel to 2.4.22 last week, so this
> patch also includes some vrf lines for igmp.c in the ipv4 dir to make
> everything compile.
> 
> The next step will be to remove the SIOCADDVRF and SIOCDELVRF calls...
> 
> - alex




-- 
James R. Leu
jl...@mi...

[linux-vrf-core] [PATCH] vrf-kernel netlink patch

[Alex P. <al...@pe...>]

Hi James,
I added rudimentary rtnetlink support for VRF adding and removing to the
vrf-kernel. I saw that you updated the kernel to 2.4.22 last week, so this
patch also includes some vrf lines for igmp.c in the ipv4 dir to make
everything compile.

The next step will be to remove the SIOCADDVRF and SIOCDELVRF calls...

- alex

AW: [linux-vrf-core] vrfctl integrated into iproute2

[Alex P. <al...@pe...>]

Hi James,
I added VRF capability to the netcat (nc) tool. Are you interested in this?

Then I have two other questions:
1) the loopback interface is only accessible within the VRF it is assigned
to ... shouldn't every VRF have it's one loopback interface?
2) the linux vrf-kernel in your P4 directory is a 2.4.20. How about updating
to 2.4.22(should be quite easy) or maybe 2.6(don't know if networking code
changed)?

- alex

Re: [linux-vrf-core] vrfctl integrated into iproute2

[James R. L. <jl...@mi...>]

On Sun, Sep 28, 2003 at 02:07:13PM +0200, Alex Peuchert wrote:
> Hi James,
> I added VRF capability to the netcat (nc) tool. Are you interested in this?

As far as accepting patches for utilities, it depends on whether or not
the util will work correctly with 'chvrf'.  'chvrf' runs a command within
a vrf. Any children of this process will inherit that vrf.

Does netcat work correctly with 'chvrf'?

> Then I have two other questions:
> 1) the loopback interface is only accessible within the VRF it is assigned
> to ... shouldn't every VRF have it's one loopback interface?

Hmmm.  This is very interesting.  What do you think about allowing the
lo interface to be part of every VRF?  Otherwise I guess you could
make dummy interfaces, place them in the vrfs then add 127.0.0.1 to them.

> 2) the linux vrf-kernel in your P4 directory is a 2.4.20. How about updating
> to 2.4.22(should be quite easy) or maybe 2.6(don't know if networking code
> changed)?

Have you tries applying the existing patch to 2.4.22?  Does it apply clean?
If not, I'll figure out how to clean it up for 2.4.22.

I know 2.6.x is going to be a big change.  As soon as UML is working cleanly
with 2.6.x then I will create a 2.6.x based development environment, and
work on converting all of my projects to 2.6.x.

> 
> - alex

-- 
James R. Leu
jl...@mi...

AW: [linux-vrf-core] vrfctl integrated into iproute2

[Alex P. <al...@pe...>]

Hi James,
it's cool to see my name in the P4 directory.

What do you mean by 'using netlink for vrf creation'? I'm pretty new to
Linux kernel development... :-(

I also have two other points concerning linux-vrf:
- I was able to ping all local IP adresses although they were not in the
same VRF -> not good
- there is only one arp table. shouldn't every VRF have it's own?

What do you think?

greetings,
-alex



> -----Ursprungliche Nachricht-----
> Von: James R. Leu [mailto:jl...@mi...]
> Gesendet: Freitag, 26. September 2003 17:58
> An: Alex Peuchert
> Cc: lin...@li...
> Betreff: Re: [linux-vrf-core] vrfctl integrated into iproute2
>
>
> Thanks for the patch, I have applied it to my tree with minor
> modifications
> (added your name to the top of ipvrf.c, had ipvrf.c include
> linux/sockios.h
> for the VRF ioctl numbers as opposed to hard coding them.)  If
> you're looking
> for another project, I know one of the complaints from the netdev
> maintainters is that the creation of VRFs is done via ioctl() calls.  They
> would prefer that it uses netlink.
>
> > - alex
>
>
>
> --
> James R. Leu
> jleu at internetnoc.com
> iNOC -> http://internetnoc.com/

Re: [linux-vrf-core] vrfctl integrated into iproute2

[James R. L. <jl...@mi...>]

On Fri, Sep 26, 2003 at 07:08:13PM +0200, Alex Peuchert wrote:
> Hi James,
> it's cool to see my name in the P4 directory.
> 
> What do you mean by 'using netlink for vrf creation'? I'm pretty new to
> Linux kernel development... :-(
> 
> I also have two other points concerning linux-vrf:
> - I was able to ping all local IP adresses although they were not in the
> same VRF -> not good

Indeed.  That is not good. I'll have to look into that.
Could you file a bug for this? (http://sf.net/projects/linux-vrf)

> - there is only one arp table. shouldn't every VRF have it's own?

I remember looking into this, but I don't think it is required because
part of the key for the lookup in the arp table is the interface index.

> What do you think?

I suppose a simple test would be to create two VRFs and have the same
next hop attached to each and see what happens.

> > -----Ursprungliche Nachricht-----
> > Von: James R. Leu [mailto:jl...@mi...]
> > Gesendet: Freitag, 26. September 2003 17:58
> > An: Alex Peuchert
> > Cc: lin...@li...
> > Betreff: Re: [linux-vrf-core] vrfctl integrated into iproute2
> >
> >
> > Thanks for the patch, I have applied it to my tree with minor
> > modifications
> > (added your name to the top of ipvrf.c, had ipvrf.c include
> > linux/sockios.h
> > for the VRF ioctl numbers as opposed to hard coding them.)  If
> > you're looking
> > for another project, I know one of the complaints from the netdev
> > maintainters is that the creation of VRFs is done via ioctl() calls.  They
> > would prefer that it uses netlink.
> >
> > > - alex
> >
> >
> >
> > --
> > James R. Leu
> > jleu at internetnoc.com
> > iNOC -> http://internetnoc.com/

-- 
James R. Leu
jleu at internetnoc.com
iNOC -> http://internetnoc.com/

Re: [linux-vrf-core] vrfctl integrated into iproute2

[James R. L. <jl...@mi...>]

On Thu, Sep 25, 2003 at 04:50:27PM +0200, Alex Peuchert wrote:
> Hi folks,
> I finally got a VRF kernel to run! YES :-D
> 
> Then I stumbled over the vrfctl util to configure a VRF. Somewhere I read
> that it really should be done by the 'ip' utility, so I took some of my
> spare time and did it. Here is the patch against your current iproute2-vrf
> from the P4 directory.

Thanks for the patch, I have applied it to my tree with minor modifications
(added your name to the top of ipvrf.c, had ipvrf.c include linux/sockios.h
for the VRF ioctl numbers as opposed to hard coding them.)  If you're looking
for another project, I know one of the complaints from the netdev
maintainters is that the creation of VRFs is done via ioctl() calls.  They
would prefer that it uses netlink.

> - alex



-- 
James R. Leu
jleu at internetnoc.com
iNOC -> http://internetnoc.com/

[linux-vrf-core] vrfctl integrated into iproute2

[Alex P. <al...@pe...>]

Hi folks,
I finally got a VRF kernel to run! YES :-D

Then I stumbled over the vrfctl util to configure a VRF. Somewhere I read
that it really should be done by the 'ip' utility, so I took some of my
spare time and did it. Here is the patch against your current iproute2-vrf
from the P4 directory.

- alex

[linux-vrf-core] vrfctl integrated into iproute2

[Alex P. <al...@pe...>]

Hi folks,
I finally got a VRF kernel to run! YES :-D

Then I stumbled over the vrfctl util to configure a VRF. Somewhere I read
that it really should be done by the 'ip' utility, so I took some of my
spare time and did it. Here is the patch against your current iproute2-vrf
from the P4 directory.

- alex

P.S. keep up the good work, this is really a great thing!

Re: [linux-vrf-core] Netfilter VRFed?

[Jorge B. [DTI2] <jo...@dt...>]

----- Original Message ----- 
From: "James R. Leu" <jl...@mi...>
To: "Jorge Boncompte [DTI2]" <jo...@dt...>
Cc: <lin...@li...>
Sent: Friday, July 11, 2003 6:50 AM
Subject: Re: [linux-vrf-core] Netfilter VRFed?


> I'm going to try and integrate your patches into my development tree.
> I think I have most of you bug fixes already, I just need to integrate
> you're NAT/conntrak work and Yon's 'PERMVRF' code.  Does that sound
> right?


    Yes, it does. If you look at the patch from the URL I posted you'll
notice that the PERMVRF work from Yon's there.

    -Jorge

==============================================================
Jorge Boncompte - Tecnico de sistemas
DTI2 - Desarrollo de la Tecnologia de las Comunicaciones
--------------------------------------------------------------
C/ Abogado Enriquez Barrios, 5   14004 CORDOBA (SPAIN)
Tlf: +34 957 761395 / FAX: +34 957 450380
--------------------------------------------------------------
jo...@dt... _-_-_-_-_-_-_-_-_-_-_-_-_-_ http://www.dti2.net
==============================================================
- Sin pistachos no hay Rock & Roll...
- Without wicker a basket cannot be done.
==============================================================

Re: [linux-vrf-core] Netfilter VRFed?

[James R. L. <jl...@mi...>]

I'm going to try and integrate your patches into my development tree.
I think I have most of you bug fixes already, I just need to integrate
you're NAT/conntrak work and Yon's 'PERMVRF' code.  Does that sound
right?

On Thu, Jun 05, 2003 at 01:00:11AM +0200, Jorge Boncompte [DTI2] wrote:
>     Hi Nick,
> 
>     Please take a look at my patches at http://aurora.dti2.net/parches
> 
>     They have been running on several hosts for months now. I know the
> changes are far from perfect, but hey they does work :) I'm open for
> suggestions, fixes, flames?? (nah!!!;)...
> 
>     With the SNAT target you don't need to specify the SRC VRF of the packet
> because the way that netfilter works. But you need to specify the DST VRF if
> you use the DNAT target.
> 
>     Best Regards,
> 
>     -Jorge
> 
> ==============================================================
> Jorge Boncompte - Tecnico de sistemas
> DTI2 - Desarrollo de la Tecnologia de las Comunicaciones
> --------------------------------------------------------------
> C/ Abogado Enriquez Barrios, 5   14004 CORDOBA (SPAIN)
> Tlf: +34 957 761395 / FAX: +34 957 450380
> --------------------------------------------------------------
> jo...@dt... _-_-_-_-_-_-_-_-_-_-_-_-_-_ http://www.dti2.net
> ==============================================================
> - Sin pistachos no hay Rock & Roll...
> - Without wicker a basket cannot be done.
> ==============================================================
> 
> ----- Original Message ----- 
> From: "Nick Eggleston" <ni...@dc...>
> To: "James R. Leu" <jl...@mi...>
> Cc: <lin...@li...>
> Sent: Wednesday, June 04, 2003 11:44 PM
> Subject: [linux-vrf-core] Netfilter VRFed?
> 
> 
> > Has the netfilter code been vrf'ed?
> >
> > I can see a particular problem with the ip_conntrack database if not.
> There may
> > be other issues with it as well.
> >
> > --Nick
> >
> >
> >
> >
> > -------------------------------------------------------
> > This SF.net email is sponsored by:  Etnus, makers of TotalView, The best
> > thread debugger on the planet. Designed with thread debugging features
> > you've never dreamed of, try TotalView 6 free at www.etnus.com.
> > _______________________________________________
> > linux-vrf-core mailing list
> > lin...@li...
> > https://lists.sourceforge.net/lists/listinfo/linux-vrf-core
> >
> >
> 
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by:  Etnus, makers of TotalView, The best
> thread debugger on the planet. Designed with thread debugging features
> you've never dreamed of, try TotalView 6 free at www.etnus.com.
> _______________________________________________
> linux-vrf-core mailing list
> lin...@li...
> https://lists.sourceforge.net/lists/listinfo/linux-vrf-core

-- 
James R. Leu

Re: [linux-vrf-core] Netfilter VRFed?

[James R. L. <jl...@mi...>]

On Wed, Jun 04, 2003 at 04:44:21PM -0500, Nick Eggleston wrote:
> Has the netfilter code been vrf'ed?
> 
> I can see a particular problem with the ip_conntrack database if not.  There may
> be other issues with it as well.

Well there is a VRF target, but I do not know if the NAT and conntrack
code will behave well with VRFs.

(sorry for the late reply, I was in the midst of moving, I'm not getting
back into my development 'groove')

> 
> --Nick
> 
> 
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by:  Etnus, makers of TotalView, The best
> thread debugger on the planet. Designed with thread debugging features
> you've never dreamed of, try TotalView 6 free at www.etnus.com.
> _______________________________________________
> linux-vrf-core mailing list
> lin...@li...
> https://lists.sourceforge.net/lists/listinfo/linux-vrf-core

-- 
James R. Leu

Re: [linux-vrf-core] Netfilter VRFed?

[Jorge B. [DTI2] <jo...@dt...>]

    Hi Nick,

    Please take a look at my patches at http://aurora.dti2.net/parches

    They have been running on several hosts for months now. I know the
changes are far from perfect, but hey they does work :) I'm open for
suggestions, fixes, flames?? (nah!!!;)...

    With the SNAT target you don't need to specify the SRC VRF of the packet
because the way that netfilter works. But you need to specify the DST VRF if
you use the DNAT target.

    Best Regards,

    -Jorge

==============================================================
Jorge Boncompte - Tecnico de sistemas
DTI2 - Desarrollo de la Tecnologia de las Comunicaciones
--------------------------------------------------------------
C/ Abogado Enriquez Barrios, 5   14004 CORDOBA (SPAIN)
Tlf: +34 957 761395 / FAX: +34 957 450380
--------------------------------------------------------------
jo...@dt... _-_-_-_-_-_-_-_-_-_-_-_-_-_ http://www.dti2.net
==============================================================
- Sin pistachos no hay Rock & Roll...
- Without wicker a basket cannot be done.
==============================================================

----- Original Message ----- 
From: "Nick Eggleston" <ni...@dc...>
To: "James R. Leu" <jl...@mi...>
Cc: <lin...@li...>
Sent: Wednesday, June 04, 2003 11:44 PM
Subject: [linux-vrf-core] Netfilter VRFed?


> Has the netfilter code been vrf'ed?
>
> I can see a particular problem with the ip_conntrack database if not.
There may
> be other issues with it as well.
>
> --Nick
>
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by:  Etnus, makers of TotalView, The best
> thread debugger on the planet. Designed with thread debugging features
> you've never dreamed of, try TotalView 6 free at www.etnus.com.
> _______________________________________________
> linux-vrf-core mailing list
> lin...@li...
> https://lists.sourceforge.net/lists/listinfo/linux-vrf-core
>
>

[linux-vrf-core] Netfilter VRFed?

[Nick E. <ni...@dc...>]

Has the netfilter code been vrf'ed?

I can see a particular problem with the ip_conntrack database if not.  There may
be other issues with it as well.

--Nick

Re: [linux-vrf-core] progress of linux-vrf

[James R. L. <jl...@mi...>]

The last release had all of th functionality that is needed for VRFs.
Th things that are left are a userland utility to allow any application
to run inside a VRF (already done it just needs to be added to the package)
and general clean up of the implementation.  I figure a working MPLS
BGP VPN implementation will push both of these tasks to completion.

On Mon, May 26, 2003 at 10:13:54PM +0200, Alex Peuchert wrote:
> Hi everybody,
> I stumble over linux-vrf looking for MPLS support in Linux and I think that
> vrf is really a great thing for Linux.
> 
> So, I wonder how alive this thing is. Especially, as the last release dates
> back to September 28, 2002.
> 
> Greetings and keep up the good work,
> 	alex
> 
> 
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: ObjectStore.
> If flattening out C++ or Java code to make your application fit in a
> relational database is painful, don't do it! Check out ObjectStore.
> Now part of Progress Software. http://www.objectstore.net/sourceforge
> _______________________________________________
> linux-vrf-core mailing list
> lin...@li...
> https://lists.sourceforge.net/lists/listinfo/linux-vrf-core

-- 
James R. Leu

[linux-vrf-core] progress of linux-vrf

[Alex P. <al...@pe...>]

Hi everybody,
I stumble over linux-vrf looking for MPLS support in Linux and I think that
vrf is really a great thing for Linux.

So, I wonder how alive this thing is. Especially, as the last release dates
back to September 28, 2002.

Greetings and keep up the good work,
	alex

Re: [linux-vrf-core] Add default vrf to process

[James R. L. <jl...@mi...>]

Take a look at the patch that karoshi posted at sf.net/project/linux-vrf/
Click on 'patches'.  I like the idea of a /proc interface, but I also like
having a programatic (system call) interface.

If you want access to my development tree, take a look at the 'Access to
my development repository' section of my mpls-linux home page (my mpls-linux
tree and my linux-vrf tree are in the same depot) http://mpls-linux.sf.net/.

On Mon, Apr 07, 2003 at 12:14:09AM -0500, Nick Eggleston wrote:
> I am investigating adding code to assign a default vrf to a process.
> 
> Each process would initially start in vrf 0.  The socket creation code would be
> modified to set the socket vrf to current->default_vrf instead of 0.
> 
> I hesitate to add yet another set of system calls for this simple function and
> am leaning toward a /proc interface.
> 
> Please comment.
> 
> --Nick
> 
> 
> 
> -- 
> Nick Eggleston
> Consultant
> Data Communications Consulting, Inc.
> 6320 Rucker Road, Suite E
> Indianapolis, IN  46220
> 317/726-0295 x18
> 317/202-2445 (fax)
> 
> 
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: ValueWeb: 
> Dedicated Hosting for just $79/mo with 500 GB of bandwidth! 
> No other company gives more support or power for your dedicated server
> http://click.atdmt.com/AFF/go/sdnxxaff00300020aff/direct/01/
> _______________________________________________
> linux-vrf-core mailing list
> lin...@li...
> https://lists.sourceforge.net/lists/listinfo/linux-vrf-core

-- 
James R. Leu