...
Section |
---|
|
Column |
---|
| - Very similar process happens when a packet's destination is router (routing input): Packet enters prerouting processing:
- - check if there is a hotspot and modify the packet for hotspot use;
- - process packet through RAW prerouting chain;
- - send packet through connection tracking;
- - process packet through Mangle prerouting chain;
- - process packet through NATs dst-nat chain;
- Run packet through routing table to make routing decision;
- Packet enters forward process;
- - check TTL value;
- - process packet through Mangle forward chain;
- - process packet through Filter forward chain;
- - send packet to accounting processes;
- Packet enters postrouting process;
- - process packet through Mangle postrouting chain;
- - process packet through NATs src-nat chain;
- - if there is a hotspot undo any modifications made in hotspot-in;
- - process packet through queue tree (HTB Global);
- - process packet through simple queues;
- Check if there is IPsec and process through IPsec policies;
|
Column |
---|
![](/docs/download/attachments/328227/02b_routing_input.png?version=1&modificationDate=1570628270223&api=v2)
![](/docs/download/attachments/328227/02b_routing_input_chains.png?version=1&modificationDate=1570628305887&api=v2)
|
|
Or when a packet is originated from the router (routing output):
Section |
---|
|
Column |
---|
| - The packet is originated from the router itself
- packet goes through the routing table to make a routing decision
- A packet enters output process
- process packet through the Bridge decision;
- send packet through connection tracking;
- process packet through Mangle output chain;
- process packet through Filter output chain;
- send packet to routing adjustment ( policy routing)
- Packet enters postrouting process;
- - process packet through Mangle postrouting chain;
- - process packet through NATs src-nat chain;
- - if there is a hotspot undo any modifications made in hotspot-in;
- - process packet through queue tree (HTB Global);
- - process packet through simple queues;
- Check if there are IPsec and process through IPsec policies;TODO
|
Column |
---|
![](/docs/download/attachments/328227/02c_routing_output.png?version=1&modificationDate=1570628337574&api=v2) ![](/docs/download/attachments/328227/02c_routing_output_chains.png?version=1&modificationDate=1570628357260&api=v2)
|
|
Flow of Bridged Packet
...