Next: Introduction

Tagging Data In The Network Stack: mbuf_tags

Angelos D. Keromytis
Columbia University
angelos@cs.columbia.edu

Abstract:

We describe the mbuf_tag API, a mechanism for tagging data as they flow through the network stack. Originally introduced in OpenBSD, mbuf_tags were initially intended for use by the IPsec stack. The API has matured enough to be used by several other kernel components, and formed the basis for the FreeBSD mbuf_tags. We present the API, discuss its various uses in the OpenBSD network stack, and describe some plans for future work. Our goal is to demonstrate the flexibility of this relatively simple mechanism and expose it to other kernel developers.

• Introduction
• The OpenBSD mbuf_tags
  • Design Rationale
  • Tags API
• Using mbuf_tags
  • IPsec-related Tags
  • Loop-Detection Tags
  • PF-related Tags
  • Miscellaneous Tags
• Future Directions
• Conclusions
• References
• About this document ...