On Tue, 2002-03-26 at 16:06, Logan Bowers wrote:

> Take a look at vtun.sourceforge.net.  If you want to want to make an
> encrypted tunnel, use ssh to make a tcp tunnel then use vtun to bridge
> through the tunnel.    

[...]

> If you really need to do the encryption/decryption in the bridge, you
> might want to think about using netfilter to get the packets into
> userspace and manipulating them with a userspace application.  

I appreciate the suggestions, but neither of these possibilities can be
made to work for what I need to do.  

Well actually I could prototype with netfilter, but it isn't much harder
to do it in-kernel than to write a userspace app.  Most importantly, by
doing it in-kernel I get much more control over latency.  I have (soft)
real-time requirements for my application.  

I've also considered IPSec and other approaches - the only other way
that might work for me is to add AES encryption to the packet mangling
stuff in the IP Filter, but then my system isn't network-transparent
anymore...  

Torrey Hoffman
[EMAIL PROTECTED]


_______________________________________________
Bridge mailing list
[EMAIL PROTECTED]
http://www.math.leidenuniv.nl/mailman/listinfo/bridge

Reply via email to