From Fedora Project Wiki
< Features
m (fixed link to discussion page) |
m (Removing QA category) |
||
| Line 66: | Line 66: | ||
<!-- A pretty picture of the page category usage is at: https://fedoraproject.org/wiki/Features/Policy/Process --> | <!-- A pretty picture of the page category usage is at: https://fedoraproject.org/wiki/Features/Policy/Process --> | ||
<!-- Note that the current Feature guidelines require useful Scope and Test Plans at certain milestones; QA is responsible for checking these, and will change this category as needed. --> | <!-- Note that the current Feature guidelines require useful Scope and Test Plans at certain milestones; QA is responsible for checking these, and will change this category as needed. --> | ||
Latest revision as of 17:35, 17 April 2009
Feature Name
- Layer 7 filter
Summary
- The L7-filter project has developed patches for the kernel and iptables as well as a collection of pattern files in order to support the analysis and filtering of Layer 7 protocols. By incorporating these patches and pattern files into Fedora, a much broader base of users would have access to Layer 7 features for purposes such as Quality of Service and Security.
Owner
- Name: David Cartwright
- email: <bugzilla at alkira dot com>
Current status
- Targeted release: Fedora 12
- Last updated: 10 April 2009
- Percentage of completion: 0%
Detailed Description
- The L7-filter project home page is at http://l7-filter.sourceforge.net/.
Benefit to Fedora
- Adding Layer 7 functionality into Fedora is in line with Fedora's strong focus on security and performance. Layer 7 filtering would provide the ability to analyze, filter and prioritize data traffic based on its protocol and extend the capabilities of the iptables firewall beyond layer 3.
Scope
Scope would most likely involve extensive testing of the i7-filter kernel and iptables patches to ensure they conform to the Fedora quality standards.
How To Test
- TBA by kernel experts. I can do testing from a sys admin perspective.
User Experience
Features would be immediately accessible via command line. However Fedora GUI tools such as the Firewall setup tool would need to be updated to support the new Layer 7 options.
Dependencies
Contingency Plan
- Any user wanting layer 7 filtering capabilities would need to apply kernel and iptables patches.
Documentation
- L7-filter project home page: http://l7-filter.sourceforge.net/.
Release Notes
Comments and Discussion