Re: [Xen-users] Packet modification on Xen virutal Bridge

[nikki-2009 <n.kawaguti@xxxxxxxxx>]

Thank you for prompt response.

So, what i actually try to do is to append data to payloads of packets whcih
are sent by domain U, and then restransmit the packets to the destinations.

After I posted the first message of this thread, I found that libipq API
provided by Netfilter might suit my purpose. 


Thaddeus Hogan wrote:
> 
> I'm not sure how you would generically intercept and modify packets short
> of writing a module for netfilter. But if you are looking specifically to
> encrypt in tunnel packets to another location I would recommend OpenVPN. 
> 
> Xen bridges are just Linux bridge interfaces, and so can be used to bridge
> any networking devices. For example you could run OpenVPN and create a
> tap0 device for the VPN, then add that device to xenbr0. Now when you
> connect an OpenVPN client to that host, all traffic on the xenbr0 bridge
> will be mirrored to tap0, which will then be present on tap0 on the other
> side of the VPN link. 
> 
> I would suggest thought that you try to accomplish your task at layer-3
> since IMHO routing is simpler in implementation than bridging over a VPN. 
> 
> Can you provide more details on what it is you're trying to do? 
> 
> 
> ----- Original Message ----- 
> From: "nikki-2009" <n.kawaguti@xxxxxxxxx> 
> To: xen-users@xxxxxxxxxxxxxxxxxxx 
> Sent: Saturday, June 27, 2009 10:28:12 AM GMT -06:00 US/Canada Central 
> Subject: [Xen-users] Packet modification on Xen virutal Bridge 
> 
> 
> Hi guys, 
> 
> Now, I'm looking for a method to modify packet headers/contents when they 
> arrive at xen bridges (e.g. xenbr0). For example, I consider a following 
> operation; when a xen bridge recieves a packet(frame), it firstly encrypts 
> the content using a predefined key, and then forwards it to other 
> host/router. 
> 
> Is is possible to add such functionality to the xen bridge ? 
> Any ideas, comments or suggestions are welcome. 
> 
> Thanks in advance. 
> 
> -- 
> View this message in context:
> http://www.nabble.com/Packet-modification-on-Xen-virutal-Bridge-tp24234052p24234052.html
>  
> Sent from the Xen - User mailing list archive at Nabble.com. 
> 
> 
> _______________________________________________ 
> Xen-users mailing list 
> Xen-users@xxxxxxxxxxxxxxxxxxx 
> http://lists.xensource.com/xen-users 
> 
> _______________________________________________
> Xen-users mailing list
> Xen-users@xxxxxxxxxxxxxxxxxxx
> http://lists.xensource.com/xen-users
> 

-- 
View this message in context: 
http://www.nabble.com/Packet-modification-on-Xen-virutal-Bridge-tp24234052p24241186.html
Sent from the Xen - User mailing list archive at Nabble.com.


_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users