First steps towards the next generation netfilter subsystem

Autor(es) Harald Welte

Macrotema Desenvolvimento

Horário 20 de abril, 11:00/11:50, Sala Castilho

Descrição

Until 2.6, every new kernel version came with its own incarnation of a packet filter: ipfw, ipfwadm, ipchains, iptables. 2.6.x still had iptables. What was wrong? In reality the netfilter project is working on gradually transforming the existing framework into something new. The 2.6.14 kernel release marks a milestone, since it contains nfnetlink, ctnetlink, nfnetlink_queue and nfnetlink_log - basically a totally new netlink-based kernel/userspace interface for most parts of the netfilter subsystem.

Currículos

Harald Welte

Harald Welte is the chairman of the netfilter/iptables core team.

His main interest in computing has always been networking. In the few time left besides netfilter/iptables related work, he\'s writing obscure documents like the \"UUCP over SSL HOWTO\" or \"A packet\'s journey through the Linux network stack\". Other kernel-related projects he has been contributing to are random netowrking hacks, some device driver work and the neighbour cache.

He has been working as an independent IT Consultant working on projects for various companies ranging from banks to manufacturers of networking gear. During the year 2001 he was living in Curitiba (Brazil), where he got sponsored for his Linux related work by Conectiva Inc.

Starting with February 2002, Harald has been contracted part-time by Astaro AG, who are sponsoring him for his current netfilter/iptables work. Aside from the Astaro sponsoring, he continues to work as a freelancing kernel developer and network security consultant.

He licenses his software under the terms of the GNU GPL. Sometimes users of his software are not compliant with the license, so he started enforcing the GPL with his gpl-violations.org project.

During the last year, Harald has started development of a free, GPL-licensed Linux RFID and electronic passport software suite. Also in 2005, he has started the OpenEZX.org project which is working on a 100% free software distribution for Motorola Linux based smartphones.

Harald is living in Berlin, Germany.