Linux 2.4 Advanced Routing HOWTO

Netherlabs BV (bert hubert <bert.hubert@netherlabs.nl>)
Gregory Maxwell <greg@linuxpower.cx>
Remco van Mook <remco@virtu.nl>
Martijn van Oosterhout <kleptog@cupid.suninternet.com>
Paul B Schroeder <paulsch@us.ibm.com>
Jasper Spaans <jasper@spaans.ds9a.nl>
howto@ds9a.nl

译者

---

动手实作 iproute2 --- 流量管制及部份网路过滤

---

1. 献题 (Dedication)

2. 前言 (Introduction)

• 2.1 责任与版权 (Disclaimer & License)
• 2.2 必备知识 (Prior knowledge)
• 2.3 Linux 可以为您做些什么 (What Linux can do for you)
• 2.4 整理须知 (Housekeeping notes)
• 2.5 连线
• 2.6 邮件论坛 (Mailing list)
• 2.7 本文布局 (Layout of this document)

3. 介绍 iproute2 (Introduction to iproute2)

• 3.1 为何要 iproute2? (Why iproute2?)
• 3.2 iproute2 导览 (iproute2 tour)
• 3.3 前提 (Prerequisites)
• 3.4 探查当前设定 (Exploring your current configuration)
• 3.5 ARP

4. 规则 - 路由原则资料库 (Rules - routing policy database)

• 4.1 简易源路由 (Simple source routing)

5. GRE 及其它通道技术 (GRE and other tunnels)

• 5.1 关于 tunnels 的几项注意 (A few general remarks about tunnels):
• 5.2 IP in IP tunneling
• 5.3 GRE tunneling
• 5.4 Userland tunnels

6. 用 Cisco 和/或 6bone 进行 IPv6 tunneling (IPv6 tunneling with Cisco and/or 6bone)

• 6.1 IPv6 Tunneling

7. IPsec

8. 多重传播路由 (Multicast routing)

9. 用 CBQ 进行频宽管理 (Using Class Based Queueing for bandwidth management)

• 9.1 伫列演算法是什么东东
• 9.2 先搞定频宽切割 (First attempt at bandwidth division)
• 9.3 如何处理频宽透支 (What to do with excess bandwidth)
• 9.4 类别再分 (Class subdivisions)
• 9.5 多界面的负载分流 (Loadsharing over multiple interfaces)

10. 更多的 qdisc (More queueing disciplines)

• 10.1 pfifo_fast
• 10.2 Stochastic Fairness Queueing
• 10.3 Token Bucket Filter
• 10.4 Random Early Detect
• 10.5 Ingress policer qdisc
• 10.6 DSMARK

11. 其它信息(Other information)

• 11.1 WRR

12. Netfilter 与 iproute - 封包标识 (Netfilter & iproute - marking packets)

13. 更多的分类器 (More classifiers)

• 13.1 "fw" 分类器 (The "fw" classifier)
• 13.2 "u32" 分类器 (The "u32" classifier)
• 13.3 "route" 分类器 (The "route" classifier)
• 13.4 "rsvp" 分类器 (The "rsvp" classifier)
• 13.5 "tcindex" 分类器 (The "tcindex" classifier)

14. 核心网路参数 (Kernel network parameters)

• 14.1 逆向路径过滤 (Reverse Path Filtering)
• 14.2 尚不明确的设定 (Obscure settings)

15. 流量控管之 backbone 程序 (Backbone applications of traffic control)

• 15.1 路由器伫列 (Router queues)

16. 食谱 (Cookbook)

• 16.1 以不同的 SLA 来跑多个站点 (Running multiple sites with different SLAs)
• 16.2 帮贵主机抵御 SYN floods (Protecting your host from SYN floods)
• 16.3 以 ICMP 速率限制抵挡 dDoS (Ratelimit ICMP to prevent dDoS)
• 16.4 为互动流量排优先次序 (Prioritizing interactive traffic)
• 16.5 用 netfilter
• 16.6 以每个路由 MTU 设定来防范 Path MTU Discovery 问题 (Circumventing Path MTU Discovery issues with per route MTU settings)
• 16.7 以 MMS 钳制来防范 Path MTU Discovery 问题 (Circumventing Path MTU Discovery issues with MSS Clamping) (for ADSL, cable, PPPoE & PPtP users)

17. 以 Proxy ARP 构建桥接器和伪桥接器 (Building bridges, and pseudo-bridges with Proxy ARP)

• 17.1 桥接和 iptalbe 的说明 (State of bridging and iptables)
• 17.2 桥接与引导 (Bridging and shaping)
• 17.3 带 Poxy-ARP 的伪桥接器 (Pseudo-bridges with Proxy-ARP)

18. 进阶 Linux Routing (Advanced Linux Routing)

• 18.1 封包伫列究竟如何工作的
• 18.2 封包伫列系统的进阶使用 (Advanced uses of the packet queueing system)
• 18.3 其它封包引导系统 (Other packet shaping systems)

19. 动态路由 - OSPF 和 BGP (Dynamic routing - OSPF and BGP)

20. 其它可行性 (Other possibilities)

21. 进阶参阅 (Further reading)

22. 感谢 (Acknowledgements)