d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
d5ab5191cf
freebsd-skq/sys
History
glebius d5ab5191cf Add a new feature for optimizining ipfw rulesets - substitution of the 
action argument with the value obtained from table lookup. The feature
is now applicable only to "pipe", "queue", "divert", "tee", "netgraph"
and "ngtee" rules.

An example usage:

  ipfw pipe 1000 config bw 1000Kbyte/s
  ipfw pipe 4000 config bw 4000Kbyte/s
  ipfw table 1 add x.x.x.x 1000
  ipfw table 1 add x.x.x.y 4000
  ipfw pipe tablearg ip from table(1) to any

In the example above the rule will throw different packets to different pipes.

TODO:
  - Support "skipto" action, but without searching all rules.
  - Improve parser, so that it warns about bad rules. These are:
    - "tablearg" argument to action, but no "table" in the rule. All
      traffic will be blocked.
    - "tablearg" argument to action, but "table" searches for entry with
      a specific value. All traffic will be blocked.
    - "tablearg" argument to action, and two "table" looks - for src and
      for dst. The last lookup will match.
2005-12-13 12:16:03 +00:00
..
alpha - Cleanup whitespace and extra ()s in vtophys() macros. 2005-12-06 21:09:01 +00:00
amd64 For the amd64 platform, we can depend on the TSC being present. This patch 2005-12-12 22:27:07 +00:00
arm - Better use of the busdma API. 2005-12-09 23:55:41 +00:00
boot Add kernel module loading option for snd_atiixp(4). 2005-12-01 03:10:12 +00:00
bsm
cam Fix a bug that caused some /dev entries to continue to exist after 2005-11-18 02:43:49 +00:00
coda Fix -Wundef from compiling the amd64 LINT. 2005-12-04 10:06:06 +00:00
compat Fix calculation of meminfo's swaptotal and swapfree on at least amd64. 2005-12-11 21:37:42 +00:00
conf Remove all redundant option file names that don't hurt readability. 2005-12-12 10:15:11 +00:00
contrib This commit was generated by cvs2svn to compensate for changes in r153200, 2005-12-07 17:32:13 +00:00
crypto
ddb Fix -Wundef. 2005-12-04 02:12:43 +00:00
dev In bge_link_upd(), rewrite the logic so that status is assigned 2005-12-13 06:14:14 +00:00
doc
fs Recent nmount(2) adoption in mount_smbfs(8) did not flag the "long" option 2005-12-05 19:05:06 +00:00
gdb
geom Fix build breakage by fixing typo. 2005-12-09 11:38:02 +00:00
gnu Inherit system-wide BLKDEV_IOSIZE definition. 2005-12-13 02:32:30 +00:00
i4b Fix -Wundef warnings found when compiling i386 LINT, GENERIC and 2005-12-05 11:58:35 +00:00
i386 Add support for 7320 and 915 PCIe chipsets. 2005-12-08 18:55:15 +00:00
ia64 - Cleanup whitespace and extra ()s in vtophys() macros. 2005-12-06 21:09:01 +00:00
isa Fix -Wundef. 2005-12-04 02:12:43 +00:00
isofs/cd9660 Normalize a significant number of kernel malloc type names: 2005-10-31 15:41:29 +00:00
kern Stop fiddling thread priority with msleep, eliminating unnecessary 2005-12-12 05:04:56 +00:00
libkern Normalize a significant number of kernel malloc type names: 2005-10-31 15:41:29 +00:00
modules Build xfs before xl. 2005-12-12 01:37:57 +00:00
net Do not accept an empty bpf program. 2005-12-08 00:05:03 +00:00
net80211 disallow module unload when there are dynamic references 2005-12-12 19:07:48 +00:00
netatalk - Store pointer to the link-level address right in "struct ifnet" 2005-11-11 16:04:59 +00:00
netatm - Store pointer to the link-level address right in "struct ifnet" 2005-11-11 16:04:59 +00:00
netgraph Fix memory leak. 2005-12-09 07:09:44 +00:00
netinet Add a new feature for optimizining ipfw rulesets - substitution of the 2005-12-13 12:16:03 +00:00
netinet6 fixed a kernel crash at the initialization time of PIM-SM register interface 2005-12-09 04:42:19 +00:00
netipsec Fix -Wundef warnings found when compiling i386 LINT, GENERIC and 2005-12-05 11:58:35 +00:00
netipx Include ip_options.h for IPX-IP encapsulation. 2005-11-20 16:17:12 +00:00
netkey Fix -Wundef from compiling the amd64 LINT. 2005-12-04 10:06:06 +00:00
netnatm Use sparse initializers for "struct domain" and "struct protosw", 2005-11-09 13:29:16 +00:00
netncp Normalize a significant number of kernel malloc type names: 2005-10-31 15:41:29 +00:00
netsmb Prevent module unloading if there are active connections. 2005-11-22 02:15:46 +00:00
nfs
nfs4client Normalize a significant number of kernel malloc type names: 2005-10-31 15:41:29 +00:00
nfsclient Improve upon rev 1.133 where NFS/TCP would not reconnect. 2005-12-12 23:18:05 +00:00
nfsserver Normalize a significant number of kernel malloc type names: 2005-10-31 15:41:29 +00:00
opencrypto
pc98 Switch MACHINE to "pc98" on FreeBSD/pc98. 2005-12-08 12:35:12 +00:00
pccard Remove the kernel portion of OLDCARD. I'm working on a replacement 2005-09-25 21:29:32 +00:00
pci The if_ti Tigon I/II driver has moved to /sys/dev/ti 2005-12-10 00:38:33 +00:00
posix4 mqueue.h has been superceded by sys/mqueue.h thanks to David Xu's work. 2005-11-28 02:58:30 +00:00
powerpc - Cleanup whitespace and extra ()s in vtophys() macros. 2005-12-06 21:09:01 +00:00
rpc Fix -Wundef. 2005-12-04 02:12:43 +00:00
security Normalize a significant number of kernel malloc type names: 2005-10-31 15:41:29 +00:00
sparc64 Fix a bug introduced in rev. 1.5; for retrieving the device_t of the 2005-12-12 16:07:11 +00:00
sys Contributions from XFS for FreeBSD project: 2005-12-12 00:02:22 +00:00
tools Add convenience macros for bus_space usage that doesn't require specification 2005-09-24 20:11:07 +00:00
ufs Fix parsing of atime, clusterr, clusterw, exec, suid, symfollow 2005-11-24 15:06:40 +00:00
vm Remove unneeded calls to pmap_remove_all(). The given page is not mapped. 2005-12-11 22:06:57 +00:00
Makefile