From: Henrik Nordstrom <hno@marasystems.com>
To: Harald Welte <laforge@gnumonks.org>,
Martin Josefsson <gandalf@wlug.westbo.se>
Cc: Netfilter-devel <netfilter-devel@lists.samba.org>
Subject: Re: [PATCH] don't try to track broadcasts or multicasts (4/4)
Date: Sun, 9 Jun 2002 21:35:06 +0200 [thread overview]
Message-ID: <200206092135.06199@henrik.marasystems.com> (raw)
In-Reply-To: <20020609171826.GD3181@naboo.de.gnumonks.org>
On Sunday 09 June 2002 19:18, Harald Welte wrote:
> the results are actually quite interesting - but maybe there's a
> particular reason for TCP behaving different than other
> protocols...
Broadcast or multicast does not apply to TCP. It does in the other
protocols (ICMP / UDP). A broadcast or multicast packet received by
TCP is with no doubt a martian as there is no aspect of TCP that can
be safely used on other than unicast links.
Linux ICMP seems to have some provision to filter out broadcasts when
they do not make sense, but it could do better I think..
But I think this aspect of the Linux IP stack can be ignored local
traffic. If you receive a broadcast frame addressed to your unicast
IP address then the processing should not be much different from
receiving a broadcast frame addressed to your broadcast address. The
likelyhood that there is TCP/IP implementations sending you broadcast
link frames when unicast was intended is very low.
But the reverse cannot be assumed. There is special applications of
TCP/IP where multicast is used as local transport. This can be seen
in some odd active-active load balancing products where all servers
must see all packets, so a Linux server/router can be required to
receive unicast IP frames from a multicast link source address or to
sent unicast IP to a multicast link address..
If this is considered in a bridge environment using the
bridge-netfilter integration then obviously no optimization based on
unicast/multicast link transport can be done on forwarded packets..
Regards
Henrik
prev parent reply other threads:[~2002-06-09 19:35 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2002-06-06 12:24 [PATCH] don't try to track broadcasts or multicasts (4/4) Martin Josefsson
2002-06-08 7:35 ` Harald Welte
2002-06-08 14:51 ` Martin Josefsson
2002-06-09 17:18 ` Harald Welte
2002-06-09 19:35 ` Henrik Nordstrom [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200206092135.06199@henrik.marasystems.com \
--to=hno@marasystems.com \
--cc=gandalf@wlug.westbo.se \
--cc=laforge@gnumonks.org \
--cc=netfilter-devel@lists.samba.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.