From owner-freebsd-net@FreeBSD.ORG  Tue Dec 27 14:25:10 2011
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id B1A9B106564A;
	Tue, 27 Dec 2011 14:25:10 +0000 (UTC)
	(envelope-from luigi@onelab2.iet.unipi.it)
Received: from onelab2.iet.unipi.it (onelab2.iet.unipi.it [131.114.59.238])
	by mx1.freebsd.org (Postfix) with ESMTP id 6E4608FC0A;
	Tue, 27 Dec 2011 14:25:10 +0000 (UTC)
Received: by onelab2.iet.unipi.it (Postfix, from userid 275)
	id 85EF07300A; Tue, 27 Dec 2011 15:41:48 +0100 (CET)
Date: Tue, 27 Dec 2011 15:41:48 +0100
From: Luigi Rizzo <rizzo@iet.unipi.it>
To: Pawel Tyll <ptyll@nitronet.pl>
Message-ID: <20111227144148.GA65684@onelab2.iet.unipi.it>
References: <1498545030.20111227015431@nitronet.pl>
	<4EF9ADBC.8090402@FreeBSD.org>
	<623366116.20111227150047@nitronet.pl>
	<20111227142600.GA65456@onelab2.iet.unipi.it>
	<143974317.20111227151804@nitronet.pl>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <143974317.20111227151804@nitronet.pl>
User-Agent: Mutt/1.4.2.3i
Cc: freebsd-ipfw@freebsd.org, "Alexander V. Chernikov" <melifaro@freebsd.org>,
	freebsd-net@freebsd.org
Subject: Re: Firewall Profiling.
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 27 Dec 2011 14:25:10 -0000

On Tue, Dec 27, 2011 at 03:18:04PM +0100, Pawel Tyll wrote:
> > plans, yes - not sure how long it will take. I have compiled
> > ipfw+dummynet as a standalone module (outside the kernel)
> > but have not yet hooked the code to netmap to figure out how fast
> > it can run.
> If  I  understand  correctly, this would require netmap to catch every
> packet from interfaces that would be firewalled/routed using ipfw, and
> then  during processing determine if packet is destined for local host
> or  network  and  write it out to host kernel for normal processing or
> quickly  write it out to some destination OS? In other words, userland
> routing  engine using netmap? :)

correct.