Linux Advanced Routing & Traffic Control

Linux Advanced Routing & Traffic Control

Netherlabs BV

bert.hubert@netherlabs.nl

Thomas Graf (Section Author)

tgraf%suug.ch

Gregory Maxwell (Section Author)

Remco van Mook (Section Author)

remco@virtu.nl

Martijn van Oosterhout (Section Author)

kleptog@cupid.suninternet.com

Paul B Schroeder (Section Author)

paulsch@us.ibm.com

Jasper Spaans (Section Author)

jasper@spaans.ds9a.nl

Pedro Larroy (Section Author)

piotr%member.fsf.org

A very hands-on approach to iproute2, traffic shaping and a bit of

netfilter.

_______________________________________________________________________

Table of Contents

1. Dedication

2. Introduction

2.1. Disclaimer & License

2.2. Prior knowledge

2.3. What Linux can do for you

2.4. Housekeeping notes

2.5. Access, CVS & submitting updates

2.6. Mailing list

2.7. Layout of this document

3. Introduction to iproute2

3.1. Why iproute2?

3.2. iproute2 tour

3.3. Prerequisites

3.4. Exploring your current configuration

3.4.1. ip shows us our links

3.4.2. ip shows us our IP addresses

3.4.3. ip shows us our routes

3.5. ARP

4. Rules - routing policy database

4.1. Simple source policy routing

4.2. Routing for multiple uplinks/providers

4.2.1. Split access

4.2.2. Load balancing

5. GRE and other tunnels

5.1. A few general remarks about tunnels:

5.2. IP in IP tunneling

5.3. GRE tunneling

5.3.1. IPv4 Tunneling

5.3.2. IPv6 Tunneling

5.4. Userland tunnels

6. IPv6 tunneling with Cisco and/or 6bone

6.1. IPv6 Tunneling

7. IPSEC: secure IP over the Internet

7.1. Intro with Manual Keying

7.2. Automatic keying

7.2.1. Theory

7.2.2. Example

7.2.3. Automatic keying using X.509 certificates

7.3. IPSEC tunnels

7.4. Other IPSEC software

7.5. IPSEC interoperation with other systems

7.5.1. Windows

7.5.2. Check Point VPN-1 NG

8. Multicast routing

9. Queueing Disciplines for Bandwidth Management