locked
should i use proxying service or FWPM_LAYER_STREAM_V{4/6}. RRS feed

  • Question


  • Good day .


    At present am working on a DNS redirection and intereption project making use of Windows Filtering Platform.
    Am making use of Application Level Enforcement Using Bind or Connect Redirection from

    https://docs.microsoft.com/en-us/windows-hardware/drivers/network/using-bind-or-connect-redirection  it was stated "A WFP connection redirection callout redirects an application's connection request so that the application connects to a proxy service instead of the original destination. The proxy service has two sockets: one for the redirected original connection and one for the new proxied outbound connection."
    "
    but in the ClassifyFunctions_ProxyCallouts.cpp module of the WFP driver sample it was  posted "Microsoft recommends using FWPM_LAYER_STREAM_V{4/6} rather than proxying network 
                 data to a local service.  Doing so will make for a better ecosystem, however if you 
                 feel you must proxy, then it is advised to use 
                 FWPM_LAYER_ALE_REDIRECT_CONNECT_V{4/6}, and have the proxy service call the 
                 REDIRECT_RECORD IOCTLs so multiple proxies can coexst without losing data on the 
                 origin of the data. "

    My  question is this in implementing a DNS redirection and intereption, should i use proxying service or FWPM_LAYER_STREAM_V{4/6}. And if am to use FWPM_LAYER_STREAM_V{4/6}, where can i find the documentation.

    Would really apprecaite some help in answering this question
    Wednesday, August 9, 2017 10:38 PM

All replies

  • I am afraid you keep posting in the wrong forum. This forum is for Smart Device Development, meaning devices running a version of Windows Embedded Compact. This OS does not support the Windows Filtering Platform, so this is the wrong forum to post in.

    Please let us know which device you are targeting so I can move this post to the correct forum (so you will have better chances of someone replying with an answer).


    Good luck,

    Michel Verhagen, eMVP
    Check out my blog: https://guruce.com/blog

    GuruCE
    Microsoft Embedded Partner
    NXP Proven Partner
    https://guruce.com
    Consultancy, training and development services.

    Interested in WEC on i.MX6?
    Get the only 100% stable and best performing i.MX6 BSP for WEC7 and WEC2013 here: https://guruce.com/imx6

    Thursday, August 10, 2017 5:55 AM