From owner-freebsd-current Tue May 19 08:42:31 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id IAA09564 for freebsd-current-outgoing; Tue, 19 May 1998 08:42:31 -0700 (PDT) (envelope-from owner-freebsd-current@FreeBSD.ORG) Received: from labinfo.iet.unipi.it (labinfo.iet.unipi.it [131.114.9.5]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id IAA09378 for ; Tue, 19 May 1998 08:41:00 -0700 (PDT) (envelope-from luigi@labinfo.iet.unipi.it) Received: from localhost (luigi@localhost) by labinfo.iet.unipi.it (8.6.5/8.6.5) id PAA09388; Tue, 19 May 1998 15:56:59 +0200 From: Luigi Rizzo Message-Id: <199805191356.PAA09388@labinfo.iet.unipi.it> Subject: Re: struct ifnet handling... To: eivind@yes.no (Eivind Eklund) Date: Tue, 19 May 1998 15:56:59 +0200 (MET DST) Cc: kjc@csl.sony.co.jp, current@FreeBSD.ORG In-Reply-To: <19980519172127.08361@follo.net> from "Eivind Eklund" at May 19, 98 05:21:08 pm X-Mailer: ELM [version 2.4 PL23] Content-Type: text Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > If you're interested in implementing fast firewall code, there are a > lot of changes that are more interesting than removing that strncmp(). > One of them is getting rid of the dual pass through the firewall rules > - which you can do by switching to a chained system. Can you explain ? I don't get this. if you refer to the poor implementation of SKIPTO rules, I already fixed that yesterday (and it is in today's dummynet patches). One thing i was thinking is to see rules as instructions, and each rule does only ONE test (be it on addresses, ports, etc.) This way you can quickly switch to the right piece of code, and avoid testing the flags 16 times on each rule to see which tests to apply and which one not. luigi -----------------------------+-------------------------------------- Luigi Rizzo | Dip. di Ingegneria dell'Informazione email: luigi@iet.unipi.it | Universita' di Pisa tel: +39-50-568533 | via Diotisalvi 2, 56126 PISA (Italy) fax: +39-50-568522 | http://www.iet.unipi.it/~luigi/ _____________________________|______________________________________ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message