From owner-freebsd-net@freebsd.org Fri Jul 10 19:12:47 2015 Return-Path: Delivered-To: freebsd-net@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C7A61997477 for ; Fri, 10 Jul 2015 19:12:47 +0000 (UTC) (envelope-from pavel.odintsov@gmail.com) Received: from mail-wg0-x229.google.com (mail-wg0-x229.google.com [IPv6:2a00:1450:400c:c00::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 5C38311CD for ; Fri, 10 Jul 2015 19:12:47 +0000 (UTC) (envelope-from pavel.odintsov@gmail.com) Received: by wgov12 with SMTP id v12so71978032wgo.1 for ; Fri, 10 Jul 2015 12:12:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=wK7FSBi7vKS7qyfuiHUCBmoVP4eDgeS/Q2p4rXoE1Bg=; b=o1lbRxW788mp5nkaAn7009f+RET7h73aiHl5tllZNO8Fe1bPMV0BzhL1JsHr4/0o5J XbBqTkn/xkrPq292+LbVDf2rYeyhV2G/M+3sCm9pcs3llo1n80HfVtDPpJmQFK/gKkuf CK/xyw6Xntlgr4NWR9iGH8PzgeBsW39iIJAjPR90nuP4EbufPcBfDAVftXeGowIUZ5SQ WrNGWQ3Ezzc20KicFSIDJ8/60R5mXZBYrXT4JuVhPRh7UwSgUbOcdqDahgDuGHwp7BvH Tpubz84UHN7g9ME5uxsWJ2WmXG2P4VL4a3DbHN7qDXNg42kL75V0t9rtiW+nI2GAD4zX lWJA== MIME-Version: 1.0 X-Received: by 10.180.79.162 with SMTP id k2mr678026wix.46.1436555565699; Fri, 10 Jul 2015 12:12:45 -0700 (PDT) Received: by 10.27.138.84 with HTTP; Fri, 10 Jul 2015 12:12:45 -0700 (PDT) In-Reply-To: References: Date: Fri, 10 Jul 2015 22:12:45 +0300 Message-ID: Subject: Re: netmap-ipfw: kipfw two instances sharing same port From: Pavel Odintsov To: Eduardo Meyer Cc: "freebsd-net@freebsd.org" Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Jul 2015 19:12:47 -0000 You should run netmap-ipfw with this command (it will run 8 copies of kipfw): for i in `seq 0 7`; do IPFW_PORT="555$i" taskset -c $i kipfw netmap:eth0-$i netmap:eth1-$i & done When you need add or remove rule you should do it for all 8 copies of kipfw: for i in `seq 0 7`;do IPFW_PORT="555$i" ipfw/ipfw add deny all from any to any On Friday, July 10, 2015, Pavel Odintsov wrote: > Hello! > > You could enable multiple queues for each NIC and run single instance of > kipfw on each pair: > kipfw netmap:ix0-0 netmap:ix1-0 > kipfw netmap:ix0-1 netmap:ix1-1 > > And so on ;) i have about 12 mpps with this configuration (on Linux > netmap). > > On Friday, July 10, 2015, Eduardo Meyer > wrote: > >> Hello, >> >> should ./kipfw and another ./kipfw work? >> >> I want to have two filtered kipfw instances sharing the same WAN port. >> >> So far I did a quick test lab and it worked, but since it's a lab >> environment I don't know if I should expect other problems when I add it >> to >> run in a real scenario. >> >> What problems should I expect? Can they be minimized? >> >> Basic stateless filtering only. >> >> -- >> =========== >> Eduardo Meyer >> pessoal: dudu.meyer@gmail.com >> profissional: ddm.farmaciap@saude.gov.br >> _______________________________________________ >> freebsd-net@freebsd.org mailing list >> http://lists.freebsd.org/mailman/listinfo/freebsd-net >> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" >> > > > -- > Sincerely yours, Pavel Odintsov > -- Sincerely yours, Pavel Odintsov