From owner-freebsd-net@FreeBSD.ORG Mon Dec 15 07:26:20 2014 Return-Path: Delivered-To: net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 6312AC1D for ; Mon, 15 Dec 2014 07:26:20 +0000 (UTC) Received: from mail-la0-x233.google.com (mail-la0-x233.google.com [IPv6:2a00:1450:4010:c03::233]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id D5CA1DC for ; Mon, 15 Dec 2014 07:26:19 +0000 (UTC) Received: by mail-la0-f51.google.com with SMTP id ms9so8880925lab.38 for ; Sun, 14 Dec 2014 23:26:18 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type:content-transfer-encoding; bh=+9pMggi5y+/+73g+aE1G/ZvXyS6JX1WZZGsvzLTWgTM=; b=L1ZKysLQBe43A4ftd7/ofC+g1xjI6mx60qUDWBIxLMtCNrNcj6MFQE5NKIMfWc9wFI 1cS4xUgODdCoCS7hG7IazoKqOKxPgYfSfX9KqqP0erJIoPif2B9wsL4oxoDZFjFzw3kT hJOBDP8QnPK+zETKz+nm4ikBrnKaqObatMgIjXtq5dk/iat/9c/MjrPTPZjx1zXviePT Lf9AlY/iEOlYosaIfoR/bzca+lggeckKnies+5ioLvVpYQzs04sSnyL3b6s1cFO1THo9 o1iTKD93vmpXj+K4mm83GfihWELZXfBx2RL5X7tBR0McaEOjZoyycr+/Rrg+/E2DxcWe ReCA== MIME-Version: 1.0 X-Received: by 10.152.19.71 with SMTP id c7mr28841513lae.79.1418628377886; Sun, 14 Dec 2014 23:26:17 -0800 (PST) Sender: rizzo.unipi@gmail.com Received: by 10.114.174.169 with HTTP; Sun, 14 Dec 2014 23:26:17 -0800 (PST) In-Reply-To: References: <20141117193354.T31139@sola.nimnet.asn.au> Date: Mon, 15 Dec 2014 08:26:17 +0100 X-Google-Sender-Auth: g-CjRYrl_utBHEkgBOJPeyASxrk Message-ID: Subject: Re: dragonflybsd's ipfw From: Luigi Rizzo To: Sato Kentney Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Cc: FreeBSD Net X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Dec 2014 07:26:20 -0000 On Mon, Dec 15, 2014 at 7:49 AM, Sato Kentney wrote= : > hi, > his ipfw2 is ok for test now. > http://www.dragonflydigest.com/2014/12/11/15220.html > i meet some problem in testing so asking qesstion in drafonflybsd's email > list. > and i want to know is it correct that the ipfw2 is faster than ipfw in > freebsd? it is what he said. i don't think he ever said that, and in any case the code seems to be taken straight from the 2002 freebsd version so i highly doubt there is any speed difference (let alone a measurable one with packets going through the kernel stack; to see an actual performance difference you'd need to run the code through netmap or some high speed framework) see http://code.google.com/p/netmap-ipfw/ cheers luigi > sure i will test it by myself. > thanks > > On 25 November 2014 at 09:17, bycn82 wrote: >> >> *that ipfw2 means "ipfw too", because it is originally from FreeBSD and >> totally not new create things, IMHO* >> >> *BTW Sato, I think the in-kernel NAT is almost there, I tested the basic >> NAT and it works in my lab environment.* >> >> >> On Tue, Nov 18, 2014 at 9:38 AM, Sato Kentney >> wrote: >> >>> i agree, >>> i am not good in english as networking administor from Tokyo. >>> but when i read the page, i see that the main idea is so call "modular >>> design" and there is a long way to catch up the freebsd's ipfw >>> >>> anyway, i dont think it can compare to freebsd's ipfw, as Smith said th= eir >>> ipfw is the version without in-kernel NAT and tables .all these importa= nt >>> features >>> >>> On Mon, Nov 17, 2014 at 5:07 PM, Ian Smith wrote= : >>> >>> > On Mon, 17 Nov 2014 15:48:13 +0800, Sato Kentney wrote: >>> > >>> > > I saw a email in dragonflybsd email list, someone is doing this! >>> > > http://www.dragonflybsd.org/docs/ipfw2/ >>> > >>> > We've had 'ipfw2' for a very long while. I couldn't help wondering w= hy >>> > DF wouldn't just import our many years of development and experience >>> > rather than using bycn82's 'rewrite'? .. but DF already has ipfw2: >>> > >>> > http://leaf.dragonflybsd.org/cgi/web-man?command=3Dipfw§ion=3DANY >>> > >>> > man page dated October 2008. Before tables, in-kernel NAT, later >>> > dummynet updates and no doubt more. So why not start from there? >>> > >>> > cheers, Ian >>> > >>> >>> >>> >>> -- >>> =E3=81=82=E3=82=8A=E3=81=8C=E3=81=A8=E3=81=86 >>> =E4=BD=90=E8=97=A4=E6=9F=AF=E5=BE=B7 >>> Sato K. >>> _______________________________________________ >>> freebsd-net@freebsd.org mailing list >>> http://lists.freebsd.org/mailman/listinfo/freebsd-net >>> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" >>> >> >> > > -- > =E3=81=82=E3=82=8A=E3=81=8C=E3=81=A8=E3=81=86 > =E4=BD=90=E8=97=A4=E6=9F=AF=E5=BE=B7 > Sato K. > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" --=20 -----------------------------------------+------------------------------- Prof. Luigi RIZZO, rizzo@iet.unipi.it . Dip. di Ing. dell'Informazione http://www.iet.unipi.it/~luigi/ . Universita` di Pisa TEL +39-050-2211611 . via Diotisalvi 2 Mobile +39-338-6809875 . 56122 PISA (Italy) -----------------------------------------+-------------------------------