netdev
[Top] [All Lists]

Re: [PATCH|RFC] IPv6 netfilter: a module for complete proxy ND support

To: vnuorval@xxxxxxxxxx
Subject: Re: [PATCH|RFC] IPv6 netfilter: a module for complete proxy ND support
From: YOSHIFUJI Hideaki / 吉藤英明 <yoshfuji@xxxxxxxxxxxxxx>
Date: Fri, 16 Jan 2004 00:54:43 +0900 (JST)
Cc: netfilter-devel@xxxxxxxxxxxxxxxxxxx, davem@xxxxxxxxxx, netdev@xxxxxxxxxxx, kuznet@xxxxxxxxxxxxx, yoshfuji@xxxxxxxxxxxxxx
In-reply-to: <Pine.LNX.4.58.0401151719160.29722@rhea.tcs.hut.fi>
Organization: USAGI Project
References: <Pine.LNX.4.58.0401151705500.29722@rhea.tcs.hut.fi> <20040116.001317.73950271.yoshfuji@linux-ipv6.org> <Pine.LNX.4.58.0401151719160.29722@rhea.tcs.hut.fi>
Sender: netdev-bounce@xxxxxxxxxxx
In article <Pine.LNX.4.58.0401151719160.29722@xxxxxxxxxxxxxxx> (at Thu, 15 Jan 
2004 17:34:50 +0200 (EET)), Ville Nuorvala <vnuorval@xxxxxxxxxx> says:

> On Fri, 16 Jan 2004, YOSHIFUJI Hideaki / [iso-2022-jp] µÈÆ£±ÑÌÀ wrote:
> 
> > net/ipv4/arp.c:
> > | *              Alan Cox        :       Don't proxy across hardware types!
> >
> > This implies that proxy works across devices and
> > it is NOT what the "proxy" does in rfc2461.
> 
> Yes, as Pekka said, Thaler's proxy is like proxy ARP.

So, all usage of pneigh_XXX() is not for rfc2461 but for proxy arp.
1) We need to consider how to implement rfc2461-proxy.
2) We need to revisit all usages in net/ipv6.

> In the current implementation the proxying router captures the multicast
> queries since it has joined the solicited-node multicast group, but it
> doesn't capture the unicast queries.

It is VERY strange to handle multicast / unicast in different way.
I really hate such a hetero (or an inconsistent) implementation.


> This is what I want to fix.

I understand the issue, but the fix is unappropriate.

-- 
Hideaki YOSHIFUJI @ USAGI Project <yoshfuji@xxxxxxxxxxxxxx>
GPG FP: 9022 65EB 1ECF 3AD1 0BDF  80D8 4807 F894 E062 0EEA

<Prev in Thread] Current Thread [Next in Thread>