Crossbow link protection attribute in Solaris Nevada
Eric Cheng recently integrated two interesting new features into Solaris Nevada, the Solaris.Next development gate:
1. Link protection -
this allows an administrator to prevent certain
types of spoofed packets from being sent from a link. This is
typically used in virtual environments (zones/domU) where individual
domains can't be trusted to behave properly. In this phase, we deliver
support for anti-spoofing of IP addresses (v4 only), mac addresses, and
non-IP l2 frames.
2. flowadm remote_port attribute -
this allows flows to created with the
'remote_port' attribute. A flow is typically used for enforcing resource
controls (e.g. bandwidth limit) on the type of traffic described by the
More to come ...