Linux 2.4 Advanced Routing HOWTO

Netherlabs BV (bert hubert <bert.hubert@netherlabs.nl>)
Gregory Maxwell <greg@linuxpower.cx>
Remco van Mook <remco@virtu.nl>
Martijn van Oosterhout <kleptog@cupid.suninternet.com>
Paul B Schroeder <paulsch@us.ibm.com>
howto@ds9a.nl

1. Dedication

2. Introduction

• 2.1 Disclaimer & License
• 2.2 Prior knowledge
• 2.3 What Linux can do for you
• 2.4 Housekeeping notes
• 2.5 Access, CVS & submitting updates
• 2.6 Mailing list
• 2.7 Layout of this document

3. Introduction to iproute2

• 3.1 Why iproute2?
• 3.2 iproute2 tour
• 3.3 Prerequisites
• 3.4 Exploring your current configuration
• 3.5 ARP

4. Rules - routing policy database

• 4.1 Simple source routing

5. GRE and other tunnels

• 5.1 A few general remarks about tunnels:
• 5.2 IP in IP tunneling
• 5.3 GRE tunneling
• 5.4 Userland tunnels

6. IPsec: secure IP over the internet

7. Multicast routing

8. Using Class Based Queueing for bandwidth management

• 8.1 What is queueing?
• 8.2 First attempt at bandwidth division
• 8.3 What to do with excess bandwidth
• 8.4 Class subdivisions
• 8.5 Loadsharing over multiple interfaces

9. More queueing disciplines

• 9.1 pfifo_fast
• 9.2 Stochastic Fairness Queueing
• 9.3 Token Bucket Filter
• 9.4 Random Early Detect
• 9.5 Ingress policer qdisc
• 9.6 WRR

10. Netfilter & iproute - marking packets

11. More classifiers

• 11.1 The "fw" classifier
• 11.2 The "u32" classifier
• 11.3 The "route" classifier
• 11.4 The "rsvp" classifier
• 11.5 The "tcindex" classifier

12. Kernel network parameters

• 12.1 Reverse Path Filtering
• 12.2 Obscure settings

13. Backbone applications of traffic control

• 13.1 Router queues

14. Cookbook

• 14.1 Running multiple sites with different SLAs
• 14.2 Protecting your host from SYN floods
• 14.3 Ratelimit ICMP to prevent dDoS
• 14.4 Prioritizing interactive traffic
• 14.5 Transparent web-caching using netfilter, iproute2, ipchains and squid

15. Advanced Linux Routing

• 15.1 How does packet queueing really work?
• 15.2 Advanced uses of the packet queueing system
• 15.3 Other packet shaping systems

16. Dynamic routing - OSPF and BGP

17. Further reading

18. Acknowledgements