netdev
[Top] [All Lists]

Re: [PATCH|RFC] IPv6 netfilter: a module for complete proxy ND support

To: YOSHIFUJI Hideaki / 吉藤英明 <yoshfuji@xxxxxxxxxxxxxx>
Subject: Re: [PATCH|RFC] IPv6 netfilter: a module for complete proxy ND support
From: Ville Nuorvala <vnuorval@xxxxxxxxxx>
Date: Thu, 15 Jan 2004 17:34:50 +0200 (EET)
Cc: netfilter-devel@xxxxxxxxxxxxxxxxxxx, davem@xxxxxxxxxx, netdev@xxxxxxxxxxx, kuznet@xxxxxxxxxxxxx
In-reply-to: <20040116.001317.73950271.yoshfuji@xxxxxxxxxxxxxx>
References: <Pine.LNX.4.58.0401151537000.29722@xxxxxxxxxxxxxxx> <20040116.000117.133662773.yoshfuji@xxxxxxxxxxxxxx> <Pine.LNX.4.58.0401151705500.29722@xxxxxxxxxxxxxxx> <20040116.001317.73950271.yoshfuji@xxxxxxxxxxxxxx>
Sender: netdev-bounce@xxxxxxxxxxx
On Fri, 16 Jan 2004, YOSHIFUJI Hideaki / [iso-2022-jp] µÈÆ£±ÑÌÀ wrote:

> net/ipv4/arp.c:
> | *              Alan Cox        :       Don't proxy across hardware types!
>
> This implies that proxy works across devices and
> it is NOT what the "proxy" does in rfc2461.

Yes, as Pekka said, Thaler's proxy is like proxy ARP.

The proxy in rfc2461 is different. It is just a router that responds to
Neighbor Discovery queries on behalf of another node on the link.

The problem is that the ND queries may be both multicast and unicast.

In the current implementation the proxying router captures the multicast
queries since it has joined the solicited-node multicast group, but it
doesn't capture the unicast queries.

This is what I want to fix.

Regards,
Ville
--
Ville Nuorvala
Research Assistant, Institute of Digital Communications,
Helsinki University of Technology
email: vnuorval@xxxxxxxxxx, phone: +358 (0)9 451 5257


<Prev in Thread] Current Thread [Next in Thread>