From owner-freebsd-net Wed Sep 19 18:13:51 2001 Delivered-To: freebsd-net@freebsd.org Received: from InterJet.elischer.org (c421509-a.pinol1.sfba.home.com [24.7.86.9]) by hub.freebsd.org (Postfix) with ESMTP id 2768C37B40C for ; Wed, 19 Sep 2001 18:13:48 -0700 (PDT) Received: from elischer.org (InterJet.elischer.org [192.168.1.1]) by InterJet.elischer.org (8.9.1a/8.9.1) with ESMTP id SAA28918; Wed, 19 Sep 2001 18:50:28 -0700 (PDT) Message-ID: <3BA90DAD.453BDFD4@elischer.org> Date: Wed, 19 Sep 2001 14:27:09 -0700 From: Julian Elischer X-Mailer: Mozilla 4.7 [en] (X11; U; FreeBSD 5.0-CURRENT i386) X-Accept-Language: en, hu MIME-Version: 1.0 To: Luigi Rizzo Cc: Bill Fumerola , Leif Neland , "Marc G. Fournier" , freebsd-net@FreeBSD.ORG Subject: Re: ipfw problems ... References: <200109191941.VAA49173@info.iet.unipi.it> Content-Type: text/plain; charset=iso-8859-2 Content-Transfer-Encoding: 7bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Luigi Rizzo wrote: > > > On Wed, Sep 19, 2001 at 07:39:13PM +0200, Leif Neland wrote: > > > > > Or you could patch ipfw to be able to use a hash-db :-) > > > > skipto caches the pointer of the rule its skipping to the first time > > it uses that rule. not going to get a better hash hit then that... > > not enough. The original message was asking for a rule of the form > > $addr in $set ... > > where $set is a potentially large set of addresses (or ports as well), > which, when "compiled", creates a hash table where one can do the search > on O(1) time. > > With the current syntax we still have to explode the set with individual > rules (naive approach) or something resembling a trie (using skipto rules). worst case for IPv4 is 32 rules... one per bit.. > > cheers > luigi > > ----------------------------------+----------------------------------------- > Luigi RIZZO, luigi@iet.unipi.it . ACIRI/ICSI (on leave from Univ. di Pisa) > http://www.iet.unipi.it/~luigi/ . 1947 Center St, Berkeley CA 94704 > Phone (510) 666 2927 . > ----------------------------------+----------------------------------------- > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-net" in the body of the message -- +------------------------------------+ ______ _ __ | __--_|\ Julian Elischer | \ U \/ / hard at work in | / \ julian@elischer.org +------>x USA \ a very strange | ( OZ ) \___ ___ | country ! +- X_.---._/ presently in San Francisco \_/ \\ v To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message