New user's registration have been closed due to high spamming and low trafic on this forum. Please contact forum admins directly if you need an account. Thanks !

Policing support in kernel

Good ideas? Share with us!
Post Reply
skion
Posts: 7
Joined: 24 Jul 2011, 08:18

Policing support in kernel

Post by skion »

Hi,

I'd like to request support for traffic policing in the kernel, in particular the act_police, and some of the cls_* and sched_* modules that are mentioned here:

http://www.shorewall.net/FAQ.htm#faq67

Compiling just the modules as described on e.g. http://wiki.excito.org/wiki/index.php/M ... rt_on_a_b3 (so w/o installing a new kernel in nvram) does not work properly as the new modules seem to expect additional symbols not available in the stock kernel:

Code: Select all

Jul 23 22:28:57 bubba kernel: [2718815.244935] cls_u32: Unknown symbol tcf_action_exec (err 0)
Jul 23 22:28:57 bubba kernel: [2718815.271720] act_police: Unknown symbol tcf_unregister_action (err 0)
Jul 23 22:28:57 bubba kernel: [2718815.278852] act_police: Unknown symbol tcf_hash_new_index (err 0)
Jul 23 22:28:57 bubba kernel: [2718815.285937] act_police: Unknown symbol tcf_hash_lookup (err 0)
Jul 23 22:28:57 bubba kernel: [2718815.292684] act_police: Unknown symbol tcf_hash_search (err 0)
Jul 23 22:28:57 bubba kernel: [2718815.299182] act_police: Unknown symbol tcf_register_action (err 0)
Jul 23 22:28:57 bubba kernel: [2718815.306096] act_police: Unknown symbol tcf_action_dump_1 (err 0)
As installing the kernel into nvram is described as a bit risky, and B3's are often deployed as gateways, I think all advanced netfilter features would make cool additions.

- Pieter
Post Reply