From owner-freebsd-current Fri Jan 7 13: 1:12 2000 Delivered-To: freebsd-current@freebsd.org Received: from info.iet.unipi.it (info.iet.unipi.it [131.114.9.184]) by hub.freebsd.org (Postfix) with ESMTP id 74421154E1 for ; Fri, 7 Jan 2000 13:00:49 -0800 (PST) (envelope-from luigi@info.iet.unipi.it) Received: (from luigi@localhost) by info.iet.unipi.it (8.9.3/8.9.3) id WAA06141; Fri, 7 Jan 2000 22:00:49 +0100 (CET) (envelope-from luigi) From: Luigi Rizzo Message-Id: <200001072100.WAA06141@info.iet.unipi.it> Subject: Re: ipfw optimizations In-Reply-To: <20000107201809.B17766@foobar.franken.de> from Harold Gutch at "Jan 7, 2000 08:18:09 pm" To: Harold Gutch Date: Fri, 7 Jan 2000 22:00:49 +0100 (CET) Cc: Nate Williams , Patrick Bihan-Faou , freebsd-current@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL61 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > > > I agree that having a `switch' type of rule for selecting interfaces > > > would be a reasonable gain of efficiency (but then again.. how > > > many interfaces is one using!) > > > > It doesn't matter, it has to do the lookup on a per-interface basis. On > > my firewall box, I have 11 interfaces. > > Two ethernet, one loopback, 4 slip, and 4 tunnel. i meant, if you only have 2-3 interfaces which are used 90% of the times, then you really have 1-2 extra rules to look for. But, in any case, it seems reasonably clear that a 'switch' statement would simplify rule writing in a number of situations, and i agree with Rod that the way ipfw does (having all rules potentially applicable for all cases) is very very flexible and probably more convenient than per-interface lists in many cases. cheers luigi -----------------------------------+------------------------------------- Luigi RIZZO, luigi@iet.unipi.it . Dip. di Ing. dell'Informazione http://www.iet.unipi.it/~luigi/ . Universita` di Pisa TEL/FAX: +39-050-568.533/522 . via Diotisalvi 2, 56126 PISA (Italy) Mobile +39-347-0373137 -----------------------------------+------------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message