DIFFUSE for FreeBSD Project Announcement
The FreeBSD Foundation is pleased to announce that Swinburne University
of Technology's Centre for Advanced Internet Architectures (CAIA) has
been awarded a grant to implement DIFFUSE for FreeBSD.
DIFFUSE (Distributed Firewall and Flow-shaper Using Statistical
Evidence) is an extension to the FreeBSD IPFW firewall subsystem
developed by CAIA <http://www.caia.swin.edu.au>. It allows IPFW to
classify traffic based on
statistical properties of flows being observed in realtime, and
instantiate network actions across a distributed set of "action nodes"
for particular flows if required.
This project will tidy up and integrate the existing DIFFUSE prototype
into FreeBSD, and incorporate a number of important new
features. Integration of DIFFUSE into FreeBSD will increase FreeBSD's
utility to designers and implementers of FreeBSD-based networking
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump