Darren Reed wrote:

> 10 Packet Interception
> Which packet filtering hook will the ilb code be introducing?


No, the current design does not introduce any PF hook
(assuming you are referring to PSARC 2005/33).


> And where would be put an additional hook if we wanted to
> enable people to do load balancing for local traffic?


It is TBD.  The current phase of the project does not
include load balancing of local traffic.  Note that this
project will have multiple deliverables (phases).  We
will not provide all the features in the first phase.


> Dropping fragmented packets is not acceptable. Talk to
> the IPsec guys for some tips on mitigating this problem.
> This will come back to bite us if it is implemented like
> this.


We are aware of several ways to handle this.  But we
opt to defer this.  In practice, this should only affect
UDP traffic.  And not supporting fragment should not
exclude the use of ILB for all UDP apps.  So we leave
this as an RFE for the next phase of the project.



-- 

                                                K. Poon.
                                                [EMAIL PROTECTED]

_______________________________________________
networking-discuss mailing list
[email protected]

Reply via email to