similar to: [Bridge] about cpu usage of linux bridge

I make some networking performance tests for Linux 3.10.13 #1 SMP is that normal Linux (pktget) ----> Linux (router) ----> Linux (Sink) eth0: 0.00 P/s 652024.78 P/s 652024.78 P/s eth1: 652175.58 P/s 2.98 P/s 652178.55 P/s with echo 0 >/proc/sys/net/bridge/bridge-nf-call-iptables CPU is about 2% with echo 1

Hello! Recently,I¡¯m doing a security project based upon ipv6.I have built up a bridge to support a transparent firewall.(my system is Fedora Core 2,kernel 2.6.5).In this system ,the version of the iptables is 1.2.7,which does not support ipv6(I have tried it).Thus,I download a new version and test it. The iptables functions in bridge mode,but the ipv6 doesn't work well.In the

Hi, I'm not sure if this is apprriate or not, but here goes anyway. The patch below updates MAINTAIER address Individuals (Only Andrew :): osdl.org -> linux-foundation.org Lists: osdl.org -> lists.osdl.org I assume the latter will change at some stage, but at least with this change the osdl/linux-foundation lists are consistent. Signed-off-by: Simon Horman

lists.linux-foundation.org seems to be funtional now, so I guess it is as good a time as any to update the MAINTAINERS file. Signed-off-by: Simon Horman <horms@verge.net.au> --- There are still some http links to osdl.org, but I'm not sure if they should be updated, and if so, what they should be updated to. Index: linux-2.6/MAINTAINERS

Hi Srs I have a linux like a bridge LAN - BRIGE -ROUTER The bridge has a ip ( non public IP) The bridge is working fine but y need to set up the Squid on the same machine where is installed the BRIDGE. I was looking for the answers and say: httpd_accel_host virtual httpd_accel_port 80 httpd_accel_with_proxy on httpd_accel_uses_host_header on and put this rules with iptables

I put a bridging firewall together last winter (with some help) and have it= in production in front of a couple windows web and mail servers for going = on 6 months now. I used Fedora C1 with 2.4.22 kernel and 0.9.6 bridge-utils= . The bridge has solved a lot of security headaches. I use a modified start= up script written by David Whitmarsh that has worked really well. http://ww=

On Sat, 22 Nov 2003 20:57:44 +0530 (GMT+05:30) anand@eis.iisc.ernet.in (SVR Anand) wrote: > Hi, > > I am one of the system administrators who manage a campus network of 5000 users > that is connected to Internet. We have placed a Linux bridge to isolate the > Internet from the campus. To nullify network flooding effect, we have used > iptables. The kernel is 2.6.0-test9, the

Torsten, I suffered a similar problem and was wondering if you found a better solution to the problem of dnatting on a transparent bridge. My setup: INTERNET <-> ROUTER <-> (linux)BRIDGE <-> INTERNAL NETWORK Solution: setup a bridge with ip x.x.x.51 and alias another ip to the bridge x.x.x.50 ( using a /16 network at home ) Now get the router to send all incomming traffic

Hi! As noted by Chris Rankin on a mail to netfilter-devel and to the linux-kernel mailing list (subject: 2.6.12: connection tracking broken?), there is a problem with the connection tracking of iptables when one of the interfaces is a bridge. On my tests here I have setup a connection between two machines using a real interface (eth0) and then the same setup using a bridge interface (br0) to

I am encountering a problem where the source address on broadcast packets seems to be altered to the local IP by the bridge netfilter. The details on the issue are documented here http://forums.gentoo.org/viewtopic-t-420158-highlight-.html. As a workaround to this issue, I have disabled the bridge netfilter through the proc filesystem with: echo "0" >

Hello, I am running into a strange problem here. I wrote you a mail earlier also regarding this. 1. I am trying to run the bridge mode over Redhat 7.3 (kernel 2.4.18). I tried the latest version of brdige mode utility and also I tried version 0.94 as well. But whenever I run the brdige mode on this kernel - the kernel goes panic saying "aiee - killing interrupt handler". Now I am in a

Hi All, Very sorry for posting my question again, because I want to tell you more details on my issue, and it is very important for us! Now I am having trouble in Ethernet bridge and 802.1Q VLAN, I have the following network: Internet | Gateway ( One UPNP device) | | <--------- If insert one Ethernet bridge box in here , somethings changes | H u b

Hi, I am using my machine as a Bridge and running transparent proxy on it. My question is - where the brdige will work? Do brdige will forward the packet before it reaches to iptables rule? If yes then what is the solution - as I want to use my machine as Transparent proxy and I have setup iptables rules on it. I have tried so many times - look at the tcpdump also - but it seems that packets

On Monday 29 September 2003 20:44, DarthPeter wrote: > Hi everyone, Hello, I'm CC-ing the bridge mailing list since there are more people on that one and they might be able to shed more light. > We are trying to build a powerful firewall that could handle > several hundred megabits of traffic and we are running into a problem > with it. We'd like to be able to accomplish

Julian, I did not understand what you meant by this paragraph. "Now, for the twist. For development and testing, I assigned an ip address and gateway to the bridge. I need to be able for a "non-it" person to install this box without having to set it up at all , so it cannot have an ip address assigned, as it *may* be in use somewhere else on the lan or router." Did your

Hi, please Cc: all replies, I'm not subscribed I seem to have troubles with my Linux bridge (2.6.8-rc2), which is apparently not bridging UDP fragments (NFS) when passing packets through iptables, but I do not see in the iptables stats where the packets are dropped. Policies for INPUT, FORWARD, OUTPUT are all "ACCEPT", and I grepped for all REJECT and DROP rules in iptables -nvL,

Hello, has anyone done any performance measuring of Linux Bridge + firewalling? I did search the net for a long time, to find out what would be the best way to measure the (maximum) performance/throughput. I didn't really come to a conclusion I'm satisfied with. Nevertheless I did create a small bridged test setup with 4 servers (gbit nics) and a linux bridge (2 x 100 mbit nic), all on

I am using the madwifi driver with the patch to allow changing of the MAC address and I have two other ethernet interfaces plus a pppoe interface. My outbound connection is ppp0. I have ath0, eth1, eth2 for internal interfaces. I have added these three interfaces to br0. Once the traffic leaves the linux router, it gets NAT'd and goes out through ppp0. All traffic on all segments works

Hello, I'm having a problem getting two (working) NICs enslaved to a bridge to both work in the bridge. The setup is just for testing and looks like this: (NETWORK)-------|bridge|---------|test PC| I'm building a bridge from an old Dell Optiplex GX1 desktop. Using kernel-2.6.9-gentoo-r4, with bridging and ebtables compiled into the kernel; the two PCI NICs are Intel, and the e100

hello,everyone I have installed bridge-utils.I want to combine bridge and iptables.But I can't get bridge-nf-0.0.7-against-2.4.18.diff . Who can tell me where i can get it? thanks! ???????? ???????? cd_xcl@sina.com