Tonnerre LOMBARD wrote: > Salut, > > On Mon, Jan 29, 2007 at 10:45:08AM +0100, Claudio Jeker wrote: >> Note: the OpenBSD routing table does not do that. > > It's hard to do hardware accelerated FIBs without the hardware, isn't it?
Addon cards can always be done. I am pretty sure that one could devise a way to plugin some hardware lookup table into OpenBSD. Use the source ;) Of course letting the NIC's access it so they can figure out where to send their packets too might be a better scheme. Also some people consider things only to be hardware when it is a real construct of and/or gates and the likes, for them FPGA's don't count... your mileage/ideas/rationale/... may vary. >> While IPv6 has a static header size it uses header stacking and so every >> router has to do the same stupid header parsing that needs tons of special >> logic. > > If you need to look at them at all, that is. For simple end-to-end routing, > this is not required. It does have to look at them even for "simple end-to-end routing" because some next-headers can be flagged as 'hop by hop' and that means exactly that: every hop needs to look at them and also process them. Normally though one doesn't add these options, but one certainly can and it is expected that people will certainly use them. This is also the fun for many 'firewalls', there are some out there which only look at the first chained header. Some NetFlow implementations also do this, and thus will report "HOP BY HOP" as the protocol, while it actually is TCP or UDP in the end :) Greets, Jeroen [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]
