From owner-freebsd-performance@FreeBSD.ORG Wed May 7 10:32:49 2003 Return-Path: Delivered-To: freebsd-performance@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id DB29F37B401 for ; Wed, 7 May 2003 10:32:49 -0700 (PDT) Received: from cultdeadsheep.org (charon.cultdeadsheep.org [80.65.226.72]) by mx1.FreeBSD.org (Postfix) with ESMTP id 25D9D43F75 for ; Wed, 7 May 2003 10:32:48 -0700 (PDT) (envelope-from sheep.killer@cultdeadsheep.org) Received: (qmail 45897 invoked from network); 7 May 2003 17:32:46 -0000 Received: from unknown (HELO lucifer.cultdeadsheep.org) (192.168.0.2) by goofy.cultdeadsheep.org with SMTP; 7 May 2003 17:32:46 -0000 Date: Wed, 7 May 2003 19:32:47 +0200 From: Clement Laforet To: veedee@c7.campus.utcluj.ro Message-Id: <20030507193247.6f60584f.sheep.killer@cultdeadsheep.org> In-Reply-To: <20030507170155.GA13015@c7.campus.utcluj.ro> References: <3EB67822.3070802@centtech.com> <20030505182756.093fb1c3.sheep.killer@cultdeadsheep.org> <3EB6A0BF.1040803@centtech.com> <20030506042044.GA84589@c7.campus.utcluj.ro> <3EB922B7.2080002@centtech.com> <20030507170155.GA13015@c7.campus.utcluj.ro> Organization: tH3 cUlt 0f tH3 d3@d sH33p X-Mailer: Sylpheed version 0.8.11 (GTK+ 1.2.10; i386-portbld-freebsd4.8) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit cc: freebsd-performance@freebsd.org cc: anderson@centtech.com Subject: Re: NAT performance tweaks X-BeenThere: freebsd-performance@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Performance/tuning List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 May 2003 17:32:50 -0000 > > Would certainly be nice to make it as a sysctl. It's a pain in the ass > to edit it manually everytime I cvsup. :/ Using a sysctl variable is a BAD idea for NAT table. If this variable is if it can be) modified, all the NAT table must be reinitialized, because of hash key. You should have a table size which minimizes hash collisions, and then avoids loops and/or hypothetical race conditions. clem