From owner-freebsd-net@FreeBSD.ORG  Tue Dec 16 01:40:21 2003
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 2473116A4CE
	for <freebsd-net@freebsd.org>; Tue, 16 Dec 2003 01:40:21 -0800 (PST)
Received: from guard.polynet.lviv.ua (guard.polynet.lviv.ua [217.9.2.1])
	by mx1.FreeBSD.org (Postfix) with SMTP id 11DCD43D39
	for <freebsd-net@freebsd.org>; Tue, 16 Dec 2003 01:40:17 -0800 (PST)
	(envelope-from akorud@polynet.lviv.ua)
Received: (qmail 20402 invoked from network); 16 Dec 2003 09:40:11 -0000
Received: from eaux.polynet.lviv.ua (HELO localhost) (217.9.2.4)
  by 217.9.2.1 with SMTP; 16 Dec 2003 09:40:11 -0000
Received: from ip-81-210-9-34.netia.com.pl (ip-81-210-9-34.netia.com.pl
	[81.210.9.34]) 	by isp.polynet.lviv.ua (IMP) with HTTP 
	for <.akorud.netadmin.lp@postoffice.polynet.lviv.ua>;
	Tue, 16 Dec 2003 11:40:11 +0200
Message-ID: <1071567611.3fded2fb8d601@isp.polynet.lviv.ua>
Date: Tue, 16 Dec 2003 11:40:11 +0200
From: Andriy Korud <akorud@polynet.lviv.ua>
To: Attila Nagy <bra@fsn.hu>
References: <1071564482.3fdec6c2ac5fb@isp.polynet.lviv.ua>
	<3FDED125.4000304@fsn.hu>
In-Reply-To: <3FDED125.4000304@fsn.hu>
MIME-Version: 1.0
Content-Type: text/plain; charset=KOI8-U
Content-Transfer-Encoding: 8bit
User-Agent: Internet Messaging Program (IMP) 3.2.2
cc: freebsd-net@freebsd.org
Subject: Re: Large scale NAT problems
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 16 Dec 2003 09:40:21 -0000

γΙΤΥΐ Attila Nagy <bra@fsn.hu>:

> Andriy Korud wrote:
> > The problem is that when traffic grows to 10Mbit and number of active NAT
> > sessions reach 70000, CPU usage exponentialy grows and system spends all
> CPU
> > time in interrupts handling. 
> > The system become completely unreponsible and unsable and only hard reset
> is the
> > solution.
> Did you try OpenBSD's pf?
> 
Is it ported to 4.9-STABLE?
How can I configure and try it?

Andriy