From owner-cvs-all Mon May 13 6: 1:27 2002 Delivered-To: cvs-all@freebsd.org Received: from iguana.icir.org (iguana.icir.org [192.150.187.36]) by hub.freebsd.org (Postfix) with ESMTP id 94E4A37B400; Mon, 13 May 2002 06:01:20 -0700 (PDT) Received: (from rizzo@localhost) by iguana.icir.org (8.11.6/8.11.3) id g4DD1IU31810; Mon, 13 May 2002 06:01:18 -0700 (PDT) (envelope-from rizzo) Date: Mon, 13 May 2002 06:01:18 -0700 From: Luigi Rizzo To: Poul-Henning Kamp Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/sys/net if_ethersubr.c src/sys/netinet ip_dummynet.c ip_dummynet.h Message-ID: <20020513060117.A31701@iguana.icir.org> References: <20020513043915.B30792@iguana.icir.org> <13421.1021290315@critter.freebsd.dk> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <13421.1021290315@critter.freebsd.dk> User-Agent: Mutt/1.3.23i Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG oh, whatever... i'll be glad to be proven wrong by some working code (and i am out of this discussion...) cheers luigi On Mon, May 13, 2002 at 01:45:15PM +0200, Poul-Henning Kamp wrote: > > >This said... if the ipfw ruleset is properly written, I am not sure > >that you can improve by more than a factor of 2..5, but I'll be glad to be > >proven wrong. > > A factor 5 isn't a bad thing. I think you overlook that by compiling > it to C we can leverage the GCC optimizer. > > For instance, a sequence like: > > ... > allow tcp from any to any 25 > allow tcp from any to any 113 > allow tcp from foohost to any 23 > ... > > The compile C code would likely only test for it being TCP once > > -- > Poul-Henning Kamp | UNIX since Zilog Zeus 3.20 > phk@FreeBSD.ORG | TCP/IP since RFC 956 > FreeBSD committer | BSD since 4.3-tahoe > Never attribute to malice what can adequately be explained by incompetence. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message