From owner-freebsd-stable Tue Apr 2 16:57:56 2002 Delivered-To: freebsd-stable@freebsd.org Received: from hilfy.ece.cmu.edu (HILFY.ECE.CMU.EDU [128.2.136.133]) by hub.freebsd.org (Postfix) with ESMTP id E3F0537B400 for ; Tue, 2 Apr 2002 16:57:53 -0800 (PST) Received: from rushlight.kf8nh.apk.net (root@VPN59.ECE.CMU.EDU [128.2.138.59]) by hilfy.ece.cmu.edu (8.11.0/8.8.8) with ESMTP id g330vmU10773; Tue, 2 Apr 2002 19:57:48 -0500 (EST) Received: (from allbery@localhost) by rushlight.kf8nh.apk.net (8.11.6/8.11.6) id g330vnE67184; Tue, 2 Apr 2002 19:57:49 -0500 (EST) (envelope-from allbery@ece.cmu.edu) X-Authentication-Warning: rushlight.kf8nh.apk.net: allbery set sender to allbery@ece.cmu.edu using -f Subject: Re: natd From: "Brandon S. Allbery " KF8NH To: Tomasz Paszkowski Cc: freebsd-stable@FreeBSD.ORG In-Reply-To: <20020403004748.GA23468@genesis.k.pl> References: <20020403004748.GA23468@genesis.k.pl> Content-Type: text/plain Content-Transfer-Encoding: 7bit X-Mailer: Evolution/1.0.2 Date: 02 Apr 2002 19:57:49 -0500 Message-Id: <1017795469.62290.3.camel@rushlight.kf8nh.apk.net> Mime-Version: 1.0 Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Tue, 2002-04-02 at 19:47, Tomasz Paszkowski wrote: > I'am running a preety big network (about 2k users) with a private addresses. > I've been using natd + ipfw for ages and I really like it. But I've run into > performance problems. Machine with PIV 1.7Ghz can't afford translating > such a pig pool of connections (huge slow down of transfer). Does any one > have seen any patches improving natd performacne ? Isn't the correct answer to this "ipf + ipnat"? You'll never be able to get rid of the performance hit from all the context switching for NATted packets when using natd. -- brandon s allbery [openafs/solaris/japh/freebsd] allbery@kf8nh.apk.net system administrator [linux/heimdal/too many hats] allbery@ece.cmu.edu electrical and computer engineering KF8NH carnegie mellon university [better check the oblivious first -ke6sls] To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message