Skip site navigation (1)Skip section navigation (2) 
Date:      Mon, 29 Jan 2024 14:56:57 -0500
From:      Paul Procacci <pprocacci@gmail.com>
To:        Jim Long <freebsd-questions@umpquanet.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: VirtIO/ipfw/natd throughput problem in hosted VM
Message-ID:  <CAFbbPujX401Q_nj0uC-mteHZ5e1xSjeKt3CoxHE_T=7%2BXcT%2B9A@mail.gmail.com>
In-Reply-To: <Zbfwwnb0IupcVsVl@sfo.umpquanet.com>
References:  <ZbfkhQXCobk0jKBg@sfo.umpquanet.com> <CAFbbPui_RX%2Bk%2BtFd18yN2MHMfSAQSqqEjPLo3GY12AchnN0eCg@mail.gmail.com> <Zbfwwnb0IupcVsVl@sfo.umpquanet.com>
next in thread | previous in thread | raw e-mail | index | archive | help 
--000000000000c6fbcb06101b0b64
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Mon, Jan 29, 2024 at 1:39=E2=80=AFPM Jim Long <freebsd-questions@umpquan=
et.com>
wrote:

> On Mon, Jan 29, 2024 at 12:54:49PM -0500, Paul Procacci wrote:
> >
> > The most glaringly obvious thing to me is to use in-kernel nat instead =
of
> > natd.
> > Packets won't have to leave the kernel at that point.
> > It's detailed in ipfw(8).
> >
> > ~Paul
>
> Thank you very much!  Your tip plus some cribbing from:
>
> https://www.neelc.org/posts/freebsd-ipfw-nat/
>
> seems to have taken care of it.
>
> Regards,
>
> Jim
>

My pleasure Jim.

~Paul

--=20
__________________

:(){ :|:& };:

--000000000000c6fbcb06101b0b64
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><div dir=3D"ltr"><br></div><br><div class=3D"gmail_qu=
ote"><div dir=3D"ltr" class=3D"gmail_attr">On Mon, Jan 29, 2024 at 1:39=E2=
=80=AFPM Jim Long &lt;<a href=3D"mailto:freebsd-questions@umpquanet.com">fr=
eebsd-questions@umpquanet.com</a>&gt; wrote:<br></div><blockquote class=3D"=
gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(20=
4,204,204);padding-left:1ex">On Mon, Jan 29, 2024 at 12:54:49PM -0500, Paul=
 Procacci wrote:<br>
&gt;<br>
&gt; The most glaringly obvious thing to me is to use in-kernel nat instead=
 of<br>
&gt; natd.<br>
&gt; Packets won&#39;t have to leave the kernel at that point.<br>
&gt; It&#39;s detailed in ipfw(8).<br>
&gt; <br>
&gt; ~Paul<br>
<br>
Thank you very much!=C2=A0 Your tip plus some cribbing from:<br>
<br>
<a href=3D"https://www.neelc.org/posts/freebsd-ipfw-nat/" rel=3D"noreferrer=
" target=3D"_blank">https://www.neelc.org/posts/freebsd-ipfw-nat/</a><br>;
<br>
seems to have taken care of it.<br>
<br>
Regards,<br>
<br>
Jim<br>
</blockquote></div><br clear=3D"all"></div><div>My pleasure Jim.</div><div>=
<br></div><div>~Paul</div><div><br></div><div><span class=3D"gmail_signatur=
e_prefix">-- </span><br><div dir=3D"ltr" class=3D"gmail_signature">________=
__________<br><br>:(){ :|:&amp; };:</div></div></div>

--000000000000c6fbcb06101b0b64--

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAFbbPujX401Q_nj0uC-mteHZ5e1xSjeKt3CoxHE_T=7%2BXcT%2B9A>