Linux 2.4 Advanced Routing HOWTO

Netherlabs BV (bert hubert <bert.hubert@netherlabs.nl>)
Gregory Maxwell <greg@linuxpower.cx>
Remco van Mook <remco@virtu.nl>
Martijn van Oosterhout <kleptog@cupid.suninternet.com>
Paul B Schroeder <paulsch@us.ibm.com>
howto@ds9a.nl

譯者﹕網中人 <netmanforever@yahoo.com>

1. 獻題 (Dedication)

2. 前言 (Introduction)

• 2.1 責任與版權 (Disclaimer & License)
• 2.2 必備知識 (Prior knowledge)
• 2.3 Linux 可以為您做些什麼 (What Linux can do for you)
• 2.4 整理須知 (Housekeeping notes)
• 2.5 連線､CVS﹐及提交最新信息 (Access, CVS & submitting updates)
• 2.6 郵件論壇 (Mailing list)
• 2.7 本文佈局 (Layout of this document)

3. 介紹 iproute2 (Introduction to iproute2)

• 3.1 為何要 iproute2? (Why iproute2?)
• 3.2 iproute2 導覽 (iproute2 tour)
• 3.3 前提 (Prerequisites)
• 3.4 探查當前設定 (Exploring your current configuration)
• 3.5 ARP

4. 規則 - 路由原則資料庫 (Rules - routing policy database)

• 4.1 簡易源路由 (Simple source routing)

5. GRE 及其它通道技術 (GRE and other tunnels)

• 5.1 關於 tunnels 的幾項注意 (A few general remarks about tunnels):
• 5.2 IP in IP tunneling
• 5.3 GRE tunneling
• 5.4 Userland tunnels

6. IPsec﹕ internet 上之安全 IP (IPsec: secure IP over the internet)

7. 多重傳播路由 (Multicast routing)

8. 用 CBQ 進行頻寬管理 (Using Class Based Queueing for bandwidth management)

• 8.1 佇列演算法是什麼東東﹖(What is queueing?)
• 8.2 先搞定頻寬切割 (First attempt at bandwidth division)
• 8.3 如何處理頻寬透支 (What to do with excess bandwidth)
• 8.4 類別再分 (Class subdivisions)
• 8.5 多界面的下載分流 (Loadsharing over multiple interfaces)

9. 更多的 qdisc (More queueing disciplines)

• 9.1 pfifo_fast
• 9.2 Stochastic Fairness Queueing
• 9.3 Token Bucket Filter
• 9.4 Random Early Detect
• 9.5 Ingress policer qdisc
• 9.6 WRR

10. Netfilter 與 iproute - 封包標識 (Netfilter & iproute - marking packets)

11. 更多的分類器 (More classifiers)

• 11.1 "fw" 分類器 (The "fw" classifier)
• 11.2 "u32" 分類器 (The "u32" classifier)
• 11.3 "route" 分類器 (The "route" classifier)
• 11.4 "rsvp" 分類器 (The "rsvp" classifier)
• 11.5 "tcindex" 分類器 (The "tcindex" classifier)

12. 核心網路參數 (Kernel network parameters)

• 12.1 逆向路徑過濾 (Reverse Path Filtering)
• 12.2 尚不明確的設定 (Obscure settings)

13. 流量控管之 backbone 程式 (Backbone applications of traffic control)

• 13.1 路由器佇列 (Router queues)

14. 劍譜 (Cookbook)

• 14.1 以不同的 SLA 來跑多個站點 (Running multiple sites with different SLAs)
• 14.2 幫貴主機抵禦 SYN floods (Protecting your host from SYN floods)
• 14.3 以 ICMP 速率限制抵擋 dDoS (Ratelimit ICMP to prevent dDoS)
• 14.4 為互動流量排優先次序 (Prioritizing interactive traffic)
• 14.5 用 netfilter､iproute2､ipchains､及 squid 做通透性 web-caching (Transparent web-caching using netfilter, iproute2, ipchains and squid)

15. 進階 Linux Routing (Advanced Linux Routing)

• 15.1 封包佇列究竟如何工作的﹖(How does packet queueing really work?)
• 15.2 封包佇列系統的進階使用 (Advanced uses of the packet queueing system)
• 15.3 其它封包引導系統 (Other packet shaping systems)

16. 動態路由 - OSPF 和 BGP (Dynamic routing - OSPF and BGP)

17. 進階參閱 (Further reading)

18. 感謝 (Acknowledgements)