From owner-freebsd-stable Mon Jan 1 5:51:52 2001 From owner-freebsd-stable@FreeBSD.ORG Mon Jan 1 05:51:49 2001 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from cage.simianscience.com (cage.simianscience.com [64.7.134.1]) by hub.freebsd.org (Postfix) with ESMTP id 88C1837B400 for ; Mon, 1 Jan 2001 05:51:48 -0800 (PST) Received: from chimp (fcage [192.168.0.2]) by cage.simianscience.com (8.11.1/8.11.1) with ESMTP id f01Dpf702131; Mon, 1 Jan 2001 08:51:42 -0500 (EST) (envelope-from mike@sentex.net) Message-Id: <4.2.2.20010101084935.01e47880@marble.sentex.net> X-Sender: mdtancsa@marble.sentex.net X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.2 Date: Mon, 01 Jan 2001 08:51:40 -0500 To: Roman Shterenzon From: Mike Tancsa Subject: Re: slow NAT ? Cc: stable@FreeBSD.ORG In-Reply-To: References: <4.2.2.20001231124602.01d21878@marble.sentex.net> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG At 12:25 PM 1/1/2001 +0200, Roman Shterenzon wrote: >On Sun, 31 Dec 2000, Mike Tancsa wrote: > > > > > I upgraded my home firewall today to sources as of last night and noticed > > that traffic via NAT is rather slow. For example, an ftp from a machine > > being nat'd I guess about 300Kbps. From the FreeBSD box, I get about 1Mb > > on my DSL connection. If I use squid or a proper proxy, its not an > > issue. This is both with the built in NAT on PPP and NATD by itself. Any > > ideas as to how to track this down ? > > 4.2-STABLE FreeBSD 4.2-STABLE #0: Sat Dec 30 09:37:21 EST 2000 > > Its only a CPU: Pentium/P55C (167.05-MHz 586-class CPU) with 96M of RAM. > >Was it that slow before the upgrade? >As a workaround you can use ipnat which performs NAT in kernel-space >rather than in user-space (as libalias does). It was somewhat slower, but not this bad. However, I dont have any benchmarks from before to measure the difference. I will try IPNAT to see if that helps at all. Thanks, ---Mike -------------------------------------------------------------------- Mike Tancsa, tel +1 519 651 3400 Network Administration, mike@sentex.net Sentex Communications www.sentex.net Cambridge, Ontario Canada www.sentex.net/mike To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message