From owner-freebsd-security@FreeBSD.ORG  Wed Mar  6 08:22:41 2013
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115])
 by hub.freebsd.org (Postfix) with ESMTP id 76D55A07
 for <freebsd-security@freebsd.org>; Wed,  6 Mar 2013 08:22:41 +0000 (UTC)
 (envelope-from ruud@stack.nl)
Received: from mx1.stack.nl (relay02.stack.nl [IPv6:2001:610:1108:5010::104])
 by mx1.freebsd.org (Postfix) with ESMTP id 2ACE8958
 for <freebsd-security@freebsd.org>; Wed,  6 Mar 2013 08:22:41 +0000 (UTC)
Received: from hammer.stack.nl (hammer.stack.nl [IPv6:2001:610:1108:5010::153])
 by mx1.stack.nl (Postfix) with ESMTP id 6A4BD3592FE;
 Wed,  6 Mar 2013 09:22:39 +0100 (CET)
Received: by hammer.stack.nl (Postfix, from userid 1965)
 id 56850613B; Wed,  6 Mar 2013 09:22:39 +0100 (CET)
Date: Wed, 6 Mar 2013 09:22:39 +0100
From: Ruud Althuizen <ruud@stack.nl>
To: Brett Glass <brett@lariat.net>
Subject: Re: Firewall Options
Message-ID: <20130306082239.GH42007@stack.nl>
References: <CA+QLa9DgZWoajW0dTkNjOGsDsS=ggXefJK9v+traZq4F99uUnQ@mail.gmail.com>
 <201303060140.SAA04749@lariat.net>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
 protocol="application/pgp-signature"; boundary="dTy3Mrz/UPE2dbVg"
Content-Disposition: inline
In-Reply-To: <201303060140.SAA04749@lariat.net>
User-Agent: Mutt/1.5.21 (2010-09-15)
Cc: freebsd-security@freebsd.org
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
Reply-To: Ruud Althuizen <ruud@stack.nl>
List-Id: "Security issues \[members-only posting\]"
 <freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Mar 2013 08:22:41 -0000


--dTy3Mrz/UPE2dbVg
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

As stated elsewhere in this thread, there's an PF giant-lock.

On Tue 05 Mar 2013 06:40 PM, Brett Glass wrote:
> This brings up a question I hadn't thought to ask before. How SMP-friendl=
y is
> the current implementation of IPFW? I will be building some routers/firew=
alls
> that will require high performance, and do not want to run into a=20
> situation where
> the firewall is single-threaded (or giant-locked) and becomes a bottlenec=
k.
>=20
> --Brett Glass

--=20
With kind regards,
Ruud Althuizen

--dTy3Mrz/UPE2dbVg
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (FreeBSD)

iEYEARECAAYFAlE2/M8ACgkQkqncCMFskRW3qQCfU8znG/CNG8FGQLgHkBTRQTec
SHoAniHfhefl7dpPv3yun/OOOjwvo7Zt
=xZqt
-----END PGP SIGNATURE-----

--dTy3Mrz/UPE2dbVg--