From owner-freebsd-ipfw Sun Jun 9 23:11:47 2002 Delivered-To: freebsd-ipfw@freebsd.org Received: from iguana.icir.org (iguana.icir.org [192.150.187.36]) by hub.freebsd.org (Postfix) with ESMTP id C5CE937B445; Sun, 9 Jun 2002 23:09:37 -0700 (PDT) Received: (from rizzo@localhost) by iguana.icir.org (8.11.6/8.11.3) id g5A69b153509; Sun, 9 Jun 2002 23:09:37 -0700 (PDT) (envelope-from rizzo) Date: Sun, 9 Jun 2002 23:09:37 -0700 From: Luigi Rizzo To: Robert Watson Cc: ipfw@freebsd.org Subject: Re: New ipfw code available Message-ID: <20020609230937.A53454@iguana.icir.org> References: <20020608201909.A41807@iguana.icir.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5.1i In-Reply-To: ; from rwatson@freebsd.org on Mon, Jun 10, 2002 at 12:57:44AM -0400 Sender: owner-freebsd-ipfw@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Mon, Jun 10, 2002 at 12:57:44AM -0400, Robert Watson wrote: > Sounds very cool indeed. However, the usual question when hard-coded-ness > is traded for flexibility is: what's the performance like? Do you have > any performance measurements you could tell us about in the before/after > scenarios? You mention 'faster' as well as 'flexible', which bodes well > :-). i have not run any comparative test yet, that was the point of the posting, find some good soul who was willing to run the new and old code and compare performance :) Anyways in this case (barring stupid bugs in the implementation of course) it is rather obvious that the new architecture must be substantially faster -- the fact is, the old ipfw macroinstruction has to test some 20-25 distinct flags even when there is nothing to be done, all of which is filtered out by the compiler with the new approach. Things would be different if the macroinstructions were executed in hardware, but they were not... cheers luigi To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ipfw" in the body of the message