Date: Fri, 7 Jan 2000 11:37:02 -0700 From: Nate Williams <nate@mt.sri.com> To: Luigi Rizzo <luigi@info.iet.unipi.it> Cc: Patrick Bihan-Faou <patrick@mindstep.com>, freebsd-current@FreeBSD.ORG Subject: Re: ipfw optimizations Message-ID: <200001071837.LAA06133@mt.sri.com> In-Reply-To: <200001071802.TAA05558@info.iet.unipi.it> References: <003301bf5937$90b0c340$c80aa8c0@local.mindstep.com> <200001071802.TAA05558@info.iet.unipi.it>
next in thread | previous in thread | raw e-mail | index | archive | help
> > One of the things I would do to optimize ipfw is: > > - instead of keeping one list with all the rules, split the list (the > > internal one) by interface and by direction (one list for ed1 incoming, > > one list for ed1 outgoing, etc.). > > one skipto rule is enough to switch between two rulesets depending > on direction, so this is not really worthwhile. > I agree that having a `switch' type of rule for selecting interfaces > would be a reasonable gain of efficiency (but then again.. how > many interfaces is one using!) It doesn't matter, it has to do the lookup on a per-interface basis. On my firewall box, I have 11 interfaces. Two ethernet, one loopback, 4 slip, and 4 tunnel. I could easily see a speedup from using per-interface lists. Nate To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200001071837.LAA06133>