From nobody Mon Jan 29 18:38:58 2024
X-Original-To: freebsd-questions@mlmmj.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
	by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4TNxsJ2Z8Yz59BkS
	for <freebsd-questions@mlmmj.nyi.freebsd.org>; Mon, 29 Jan 2024 18:39:00 +0000 (UTC)
	(envelope-from freebsd-questions@umpquanet.com)
Received: from sfo.umpquanet.com (sfo.umpquanet.com [104.245.33.249])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
	 client-signature RSA-PSS (2048 bits) client-digest SHA256)
	(Client CN "umpquanet.com", Issuer "R3" (verified OK))
	by mx1.freebsd.org (Postfix) with ESMTPS id 4TNxsH3BDtz586P
	for <freebsd-questions@freebsd.org>; Mon, 29 Jan 2024 18:38:59 +0000 (UTC)
	(envelope-from freebsd-questions@umpquanet.com)
Authentication-Results: mx1.freebsd.org;
	none
Received: from sfo.umpquanet.com (localhost [127.0.0.1])
	by sfo.umpquanet.com (8.16.1/8.16.1) with ESMTPS id 40TIcwCA031284
	(version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NO);
	Mon, 29 Jan 2024 10:38:58 -0800 (PST)
	(envelope-from freebsd-questions@umpquanet.com)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=umpquanet.com;
	s=20231023; t=1706553538;
	bh=KXihWi5hGFklLUCiTLGU4AMYN2YhDwfLX8fvG2rtpJs=;
	h=Date:From:To:Cc:Subject:References:In-Reply-To;
	b=a0NzaeqGPqfBIurRUjMg/jGevErIYMkjdRiBUR4Si8iB5NcZG4yoVr96MygU8XE0L
	 +CxWUp9Nt5Y3PTHX2ctrAYJGk04331L6Bf7lq/t3CFQ6swRcId21xUA9sxsGBBqB7d
	 Sv+bIGtpY4rnlK30WNs5cOm+UfUbrrO5gUa1bCOxn9FeAa8vrvfPqO8XcgDPX97V/+
	 btrfL6KWtxKVuWmYzg19/E9CXmOk1V7tzR2as5nsRM8iSlNaiGZPEfnEcRtz2hD7Em
	 06ig6PD3Q3m/iHRf2P+Zbdp0YCAnOW98ZjVo+Wb6N33+uthQh2IRHaA7/zMOZ9bcHU
	 GrsoRgK6wbFrw==
Received: (from james@localhost)
	by sfo.umpquanet.com (8.16.1/8.16.1/Submit) id 40TIcweU031283;
	Mon, 29 Jan 2024 10:38:58 -0800 (PST)
	(envelope-from freebsd-questions@umpquanet.com)
X-Authentication-Warning: sfo.umpquanet.com: james set sender to freebsd-questions@umpquanet.com using -f
Date: Mon, 29 Jan 2024 10:38:58 -0800
From: Jim Long <freebsd-questions@umpquanet.com>
To: Paul Procacci <pprocacci@gmail.com>
Cc: freebsd-questions@freebsd.org
Subject: Re: VirtIO/ipfw/natd throughput problem in hosted VM
Message-ID: <Zbfwwnb0IupcVsVl@sfo.umpquanet.com>
References: <ZbfkhQXCobk0jKBg@sfo.umpquanet.com>
 <CAFbbPui_RX+k+tFd18yN2MHMfSAQSqqEjPLo3GY12AchnN0eCg@mail.gmail.com>
List-Id: User questions <freebsd-questions.freebsd.org>
List-Archive: https://lists.freebsd.org/archives/freebsd-questions
List-Help: <mailto:questions+help@freebsd.org>
List-Post: <mailto:questions@freebsd.org>
List-Subscribe: <mailto:questions+subscribe@freebsd.org>
List-Unsubscribe: <mailto:questions+unsubscribe@freebsd.org>
Sender: owner-freebsd-questions@freebsd.org
X-BeenThere: freebsd-questions@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <CAFbbPui_RX+k+tFd18yN2MHMfSAQSqqEjPLo3GY12AchnN0eCg@mail.gmail.com>
X-Rspamd-Queue-Id: 4TNxsH3BDtz586P
X-Spamd-Bar: ----
X-Rspamd-Pre-Result: action=no action;
	module=replies;
	Message is reply to one we originated
X-Spamd-Result: default: False [-4.00 / 15.00];
	REPLY(-4.00)[];
	ASN(0.00)[asn:6364, ipnet:104.245.32.0/23, country:US]

On Mon, Jan 29, 2024 at 12:54:49PM -0500, Paul Procacci wrote:
>
> The most glaringly obvious thing to me is to use in-kernel nat instead of
> natd.
> Packets won't have to leave the kernel at that point.
> It's detailed in ipfw(8).
> 
> ~Paul

Thank you very much!  Your tip plus some cribbing from:

https://www.neelc.org/posts/freebsd-ipfw-nat/

seems to have taken care of it.

Regards,

Jim