From owner-freebsd-hackers@FreeBSD.ORG Sat Jan 17 12:55:09 2004 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 35DD316A4CE; Sat, 17 Jan 2004 12:55:09 -0800 (PST) Received: from fledge.watson.org (fledge.watson.org [204.156.12.50]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8461543D2D; Sat, 17 Jan 2004 12:55:07 -0800 (PST) (envelope-from robert@fledge.watson.org) Received: from fledge.watson.org (localhost [127.0.0.1]) by fledge.watson.org (8.12.10/8.12.10) with ESMTP id i0HKrHUd021270; Sat, 17 Jan 2004 15:53:17 -0500 (EST) (envelope-from robert@fledge.watson.org) Received: from localhost (robert@localhost)i0HKrGaC021267; Sat, 17 Jan 2004 15:53:16 -0500 (EST) (envelope-from robert@fledge.watson.org) Date: Sat, 17 Jan 2004 15:53:16 -0500 (EST) From: Robert Watson X-Sender: robert@fledge.watson.org To: Andre Oppermann In-Reply-To: <40097534.2913A1D2@freebsd.org> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: freebsd-hackers@freebsd.org cc: Sten Daniel =?iso-8859-1?Q?S=F8rsdal?= cc: freebsd-net@freebsd.org Subject: Re: ip_input - chksum - why is it done so early in ip_input? X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 17 Jan 2004 20:55:09 -0000 On Sat, 17 Jan 2004, Andre Oppermann wrote: > > Besides that i'd like to add that FreeBSD has the fastest forwarding engine > > i've seen on any free OS. It's in my opinion a very suitable OS for > > routing/forwarding. > > We are working on it to make it even faster. If you are using 5.2 or > -current you get the first step of it by enabling > net.inet.ip.fastfowarding. This is a newly written fast path for packet > forwarding. (Do not do this on 4.9 because that is the old ip_flow > code). You can also enable debug.mpsafenet, which disables holding the Giant lock over the forwarding path for supported ethernet drivers. Unfortunately, this option can't be used with KAME IPSEC or IPv6 yet, but can be used with FAST_IPSEC. Robert N M Watson FreeBSD Core Team, TrustedBSD Projects robert@fledge.watson.org Senior Research Scientist, McAfee Research