From owner-freebsd-current  Fri Jan  7 10:37:25 2000
Delivered-To: freebsd-current@freebsd.org
Received: from ns.mt.sri.com (ns.mt.sri.com [206.127.79.91])
	by hub.freebsd.org (Postfix) with ESMTP id 87881157AA
	for <freebsd-current@FreeBSD.ORG>; Fri,  7 Jan 2000 10:37:18 -0800 (PST)
	(envelope-from nate@mt.sri.com)
Received: from mt.sri.com (rocky.mt.sri.com [206.127.76.100])
	by ns.mt.sri.com (8.9.3/8.9.3) with SMTP id LAA20593;
	Fri, 7 Jan 2000 11:37:04 -0700 (MST)
	(envelope-from nate@rocky.mt.sri.com)
Received: by mt.sri.com (SMI-8.6/SMI-SVR4)
	id LAA06133; Fri, 7 Jan 2000 11:37:02 -0700
Date: Fri, 7 Jan 2000 11:37:02 -0700
Message-Id: <200001071837.LAA06133@mt.sri.com>
From: Nate Williams <nate@mt.sri.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
To: Luigi Rizzo <luigi@info.iet.unipi.it>
Cc: Patrick Bihan-Faou <patrick@mindstep.com>,
	freebsd-current@FreeBSD.ORG
Subject: Re: ipfw optimizations
In-Reply-To: <200001071802.TAA05558@info.iet.unipi.it>
References: <003301bf5937$90b0c340$c80aa8c0@local.mindstep.com>
	<200001071802.TAA05558@info.iet.unipi.it>
X-Mailer: VM 6.34 under 19.16 "Lille" XEmacs Lucid
Reply-To: nate@mt.sri.com (Nate Williams)
Sender: owner-freebsd-current@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

> > One of the things I would do to optimize ipfw is:
> > - instead of keeping one list with all the rules, split the list (the
> >   internal one) by interface and by direction (one list for ed1 incoming,
> >   one list for ed1 outgoing, etc.).
> 
> one skipto rule is enough to switch between two rulesets depending
> on direction, so this is not really worthwhile.
> I agree that having a `switch' type of rule for selecting interfaces
> would be a reasonable gain of efficiency (but then again.. how 
> many interfaces is one using!)

It doesn't matter, it has to do the lookup on a per-interface basis.  On
my firewall box, I have 11 interfaces.

Two ethernet, one loopback, 4 slip, and 4 tunnel.

I could easily see a speedup from using per-interface lists.


Nate


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message