From owner-freebsd-questions@freebsd.org Wed Aug 12 03:49:57 2015 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id AA28099F67A for ; Wed, 12 Aug 2015 03:49:57 +0000 (UTC) (envelope-from dmitry@pushware.net) Received: from mail.pushware.net (mail.pushware.net [198.245.177.5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 8A9071C8 for ; Wed, 12 Aug 2015 03:49:57 +0000 (UTC) (envelope-from dmitry@pushware.net) Received: from localhost (localhost [127.0.0.1]) by mail.pushware.net (Postfix) with ESMTP id B557A9156B4 for ; Tue, 11 Aug 2015 20:41:25 -0700 (PDT) Received: from mail.pushware.net ([127.0.0.1]) by localhost (mail.pushware.net [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id bFOn29YvFPYe for ; Tue, 11 Aug 2015 20:41:25 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.pushware.net (Postfix) with ESMTP id F0CCA3D37B9 for ; Tue, 11 Aug 2015 20:41:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at pushware.net Received: from mail.pushware.net ([127.0.0.1]) by localhost (mail.pushware.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id Aikp8VmGUxkX for ; Tue, 11 Aug 2015 20:41:24 -0700 (PDT) Received: from mail.pushware.net (mail.pushware.net [10.5.2.5]) by mail.pushware.net (Postfix) with ESMTP id B442A9156B4 for ; Tue, 11 Aug 2015 20:41:24 -0700 (PDT) Date: Tue, 11 Aug 2015 20:41:24 -0700 (PDT) From: Dmitry Mikhailov To: freebsd-questions@freebsd.org Message-ID: <1960829705.1298.1439350884619.JavaMail.zimbra@pushware.net> Subject: synproxy pps MIME-Version: 1.0 X-Originating-IP: [10.5.2.5] X-Mailer: Zimbra 8.6.0_GA_1178 (ZimbraWebClient - FF39 (Mac)/8.6.0_GA_1178) Thread-Topic: synproxy pps Thread-Index: Vt6YYogbPcAcxOvFGoQRxM6ZGWCBCg== Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Content-Filtered-By: Mailman/MimeDel 2.1.20 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Aug 2015 03:49:57 -0000 Are there any pf synproxy PPS benchmarks available? I am trying to understand what kind of SYN pps rate I can expect to be able to handle on a 10GE port with modern Xeon? Something like this chart would be very useful: https://r00t-services.net/knowledgebase/14/Homemade-DDoS-Protection-Using-IPTables-SYNPROXY.html Dmitry