Subject: Re: Packet Filter
To: None <current-users@NetBSD.org>
From: Peter Postma <peter@pointless.nl>
List: current-users
Date: 03/24/2005 08:50:49
On Thu, Mar 24, 2005 at 12:56:41AM +0000, Marcin Jessa wrote:
> Hi Peter.
> 
> Forgive me my ignorance but I can see ALTQ is supported in the kernel.
> I allways assumed ALTQ was a part of packet filter or at least a close "relative".
> Does this mean ALTQ per today can be tagged by ipf only?
> 

No, ALTQ uses its own classifier and filter, it is independent of ipf/pf.

> And when it comes to pfsync, is anyone working on it and on CARP at the moment?
> I read some info on the web CARP was ported over but I never saw it in the sources.
> There is /usr/pkgsrc/net/ucarp ...but it's "just" a userland application.
> 

I've no idea about pfsync or carp, but there is patch floating around for
the latter, see the archives.

> With your patch, will this disable ALTQ for ipf?
> What would be the kernel options to include it?
> 

The patch integrates ALTQ into pf, making all separate altq programs
(altqd, altqstat, ..) redundant. You can still use ipf, but you only need
to enable pf if you want to use altq then (and that's basically the reason
why the patch can't go into the tree).

All instructions are at the top of the patch.

-- 
Peter Postma