Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Section
bordertrue


Column
width450px
  1. Very similar process happens when a packet's destination is router (routing input): Packet enters prerouting processing:
    1. - check if there is a hotspot and modify the packet for hotspot use;
    2. - process packet through RAW prerouting chain;
    3. - send packet through connection tracking;
    4. - process packet through Mangle prerouting chain;
    5. - process packet through NATs dst-nat chain;

  2. Run packet through routing table to make routing decision;

  3. Packet enters forward process;
    1. - check TTL value;
    2. - process packet through Mangle forward chain;
    3. - process packet through Filter forward chain;
    4. - send packet to accounting processes;

  4.  Packet enters postrouting process; 
    1. - process packet through Mangle postrouting chain;
    2. - process packet through NATs src-nat chain;
    3. - if there is a hotspot undo any modifications made in hotspot-in;
    4. - process packet through queue tree (HTB Global);
    5. - process packet through simple queues;

  5.  Check if there is IPsec and process through IPsec policies;


Column



Or when a packet is originated from the router (routing output):

Section
bordertrue


Column
width450px
  1. The packet is originated from the router itself
    1. packet goes through the routing table to make a routing decision
  2. A packet enters output process
    1. process packet through the Bridge decision;
    2. send packet through connection tracking;
    3. process packet through Mangle output chain;
    4. process packet through Filter output chain;
    5. send packet to routing adjustment ( policy routing)
  3.  Packet enters postrouting process; 
    1. - process packet through Mangle postrouting chain;
    2. - process packet through NATs src-nat chain;
    3. - if there is a hotspot undo any modifications made in hotspot-in;
    4. - process packet through queue tree (HTB Global);
    5. - process packet through simple queues;

  4. Check if there are IPsec and process through IPsec policies;TODO


Column




Flow of Bridged Packet

...