[pve-devel] pvefw: using ctmark to associacte connections to VMs

[Alexandre DERUMIER]

>>Or is it good enough to use local ARP tables for that? 
>>
>># cat /proc/net/arp 

oh, yes ! I didn't thinked about that.
it should be faster and a lot less overhead.


----- Mail original ----- 

De: "Dietmar Maurer" <dietmar at proxmox.com> 
À: "Alexandre DERUMIER" <aderumier at odiso.com> 
Cc: pve-devel at pve.proxmox.com 
Envoyé: Lundi 3 Mars 2014 07:47:19 
Objet: RE: [pve-devel] pvefw: using ctmark to associacte connections to VMs 

> It's possible with ipset, to dynamicaly add to ipset ipmap, an src ip from a 
> iptables match 

Or is it good enough to use local ARP tables for that? 

# cat /proc/net/arp