From owner-freebsd-current@FreeBSD.ORG Mon Sep 6 08:21:34 2010 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id AE43510656D2 for ; Mon, 6 Sep 2010 08:21:34 +0000 (UTC) (envelope-from peter@3mail4.co.uk) Received: from mail4.morpheushosting.sk (mail4.morpheushosting.sk [69.60.120.12]) by mx1.freebsd.org (Postfix) with ESMTP id 724DC8FC26 for ; Mon, 6 Sep 2010 08:21:34 +0000 (UTC) Received: from [192.168.1.5] (cpc14-know8-0-0-cust118.know.cable.virginmedia.com [82.46.228.119]) (authenticated bits=0) by mail4.morpheushosting.sk (8.14.4/8.14.4) with ESMTP id o868LJs4081563 for ; Mon, 6 Sep 2010 10:21:34 +0200 (CEST) (envelope-from peter@3mail4.co.uk) Message-ID: <4C84A44D.90403@3mail4.co.uk> Date: Mon, 06 Sep 2010 09:20:29 +0100 From: Peter Reo Molnar User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.1.11) Gecko/20100713 Thunderbird/3.0.6 MIME-Version: 1.0 To: freebsd-current@freebsd.org References: <4C825094.5040204@secover.com.br> <20100905155311.GA48095@onelab2.iet.unipi.it> <4C84364D.9070700@DataIX.net> In-Reply-To: <4C84364D.9070700@DataIX.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Status: No, score=-101.9 required=5.1 tests=BAYES_00,SHORTCIRCUIT shortcircuit=ham autolearn=disabled version=3.3.1 X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on mail4.morpheushosting.sk Subject: significantly slow IPFW + NATD + amd64 X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Sep 2010 08:21:34 -0000 Hello, I tried setup NAT with IPFW, compiled my kernel and I found that there is very slow connection. After I disabled NAT and IPFW then speed was increased. 64-bit FreeBSD 9-CURRENT : With IPFW: 1.2 MB/sec Without IPFW: 33 MB/sec my ipfw work with i386 (stable) without speed decreasing: fw.test.conf: -f flush add 00050 divert 8668 ip4 from any to any via re0 add 00100 allow ip from any to any via lo0 add 00200 deny ip from any to 127.0.0.0/8 add 00300 deny ip from 127.0.0.0/8 to any -- peter