Date: Sat, 21 Oct 2006 00:47:54 -0600 From: Brett Glass <brett@lariat.net> To: net@freebsd.org Subject: Avoiding natd overhead Message-ID: <200610210648.AAA01737@lariat.net>
next in thread | raw e-mail | index | archive | help
I'm working with a FreeBSD-based router that's using IPFW for policy routing, traffic shaping, and transparent proxying and natd for network address translation. IPFW does these things pretty well (in fact, I don't know if another firewall, like pf, could even do some of these things I'm doing with IPFW), but natd is by far the most CPU-intensive process on the system and is causing it to crumple like a wet towel under heavy loads. How can I replace just the functionality of natd without moving to an entirely new firewall? Can I still select which packets are routed to the NAT engine, and when this occurs during the processing of the packet? --Brett Glass
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200610210648.AAA01737>