From owner-freebsd-net@FreeBSD.ORG Sun Jun 1 13:40:50 2014 Return-Path: Delivered-To: net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 0C9F0292 for ; Sun, 1 Jun 2014 13:40:50 +0000 (UTC) Received: from mail-vc0-x22e.google.com (mail-vc0-x22e.google.com [IPv6:2607:f8b0:400c:c03::22e]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id BF4282E16 for ; Sun, 1 Jun 2014 13:40:49 +0000 (UTC) Received: by mail-vc0-f174.google.com with SMTP id ik5so3768560vcb.5 for ; Sun, 01 Jun 2014 06:40:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc:content-type; bh=T5okD8IsPrWXLB25aQPYqy25XgMgvgs643YlLPtUDHQ=; b=Y0v3de6KqxfG7o2xg/vIUNZ9kOtOR3QVhj3tm4CBNr1y4eE65KBFSjt63DbBdSBeb3 Zy+yZDBOZZC/Z/evOlZ2MkkQIvMuG9fOD5W2/TECteCwvdjniIA9qtyFSCHY+J0ReeHH g10GTWju3dIoAoCNymSm0/3n/aKuEHYEG1FlJGpWfclXBwXbHQC/5tXaw2a5NDKmjMlV oUumXPgmJq2ZsE94VX8WVfc96UqdBjxb78OtpC6bzysRkV77dziDc2g4kwXKvWzUcnUh i53Z8o1wVa1our/SccSopBI6b/b6o9LbymPy4IMIgoFuan/xEJffJcCHYJx5fLE3PD3U ODMw== X-Received: by 10.58.219.166 with SMTP id pp6mr25512569vec.1.1401630048697; Sun, 01 Jun 2014 06:40:48 -0700 (PDT) MIME-Version: 1.0 Sender: cochard@gmail.com Received: by 10.58.4.131 with HTTP; Sun, 1 Jun 2014 06:40:28 -0700 (PDT) In-Reply-To: References: From: =?ISO-8859-1?Q?Olivier_Cochard=2DLabb=E9?= Date: Sun, 1 Jun 2014 15:40:28 +0200 X-Google-Sender-Auth: 441WnaOhkDHQFTqPoW3LDD88A0w Message-ID: Subject: Re: Hint about netmap To: Mohammad Badie Zadegan Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.18 Cc: "freebsd-net@freebsd.org" X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Jun 2014 13:40:50 -0000 On Sun, Jun 1, 2014 at 2:23 PM, Mohammad Badie Zadegan wrote: > Hi Everybody, > > I have a question about netmap(the fast packet I/O framework) > I have released my own firewall and now I want to test it at the maximum > packet/s range that available but still I can not select netmap or pktgen! > > Does netmap really is faster than pktgen? > What is the real difference between netmap vs pktgen? > Hi, netmap is "just" a packet input/output framework (like intel DPDK libraries) : Software that receive (like tcpdump) or generate (like iperf) high rate of packet need to be adapted to use the netmap framework. pktgen is a small example of packet generator/receiver using the netmap framework. For obtaining a fast firewall with netmap: You need to adapt a firewall software to use netmap. The first example of such firewall is netmap-ipfw ( https://code.google.com/p/netmap-ipfw/), but as a userland firewall separated from the host IP stack, it can be used as a "bridge-firewall" only and not a classical "router-firewall". I don't know the status of the current work of adapting a full IP routing stack to netmap, but it should be not easy: Some company like 6wind ( http://www.6wind.com/) seems dedicated to this task (in their case with Intel DPDK). Regards, Olivier