From owner-freebsd-net@FreeBSD.ORG Sat Dec 27 13:32:47 2014 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 4202712D; Sat, 27 Dec 2014 13:32:47 +0000 (UTC) Received: from mail.ipfw.ru (mail.ipfw.ru [IPv6:2a01:4f8:120:6141::2]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 63BB61123; Sat, 27 Dec 2014 13:32:01 +0000 (UTC) Received: from secured.by.ipfw.ru ([95.143.220.47] helo=[10.0.0.124]) by mail.ipfw.ru with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.82 (FreeBSD)) (envelope-from ) id 1Y4rTJ-0005Df-MV; Sat, 27 Dec 2014 17:31:57 +0400 Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 8.1 \(1993\)) Subject: Re: FIXED [Re: Netmap-ipfw, how to fill a table by 15K entries ?] From: "Alexander V. Chernikov" In-Reply-To: Date: Sat, 27 Dec 2014 16:31:55 +0300 Content-Transfer-Encoding: quoted-printable Message-Id: <4A917898-0659-4ECE-976F-241A989A4E77@ipfw.ru> References: To: Luigi Rizzo X-Mailer: Apple Mail (2.1993) Cc: "freebsd-net@freebsd.org" , "IT Department, AkNet ISP" , "Alexander V. Chernikov" X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 27 Dec 2014 13:32:47 -0000 > On 23 Dec 2014, at 21:26, Luigi Rizzo wrote: >=20 > Ok please pull the "next" branch from code.google.com/p/netmap-ipfw/ > which has a fix applied (set TCP_NODELAY on the connection). > With that i can load a table with 64k entries in about 3 seconds. >=20 > The "master" branch also has the same fix, but loading a table > appears to be buggy when it comes to tables, > I think it is pointless to debug the problem in that branch > since "next" contains more recent code from > Alexander Chernikov which is much more robust for tables. The only thing I can add here is that new table code is capable of = doing batch add/del operations via ipfw table AAA add cidr1 value1 [cidr2 value2] [cidr3 value3] ...=20 >=20 > Thanks for the bug report. >=20 > cheers > luigi >=20 > On Tue, Dec 23, 2014 at 2:02 PM, IT Department, AkNet ISP = wrote: >> Hello to All >>=20 >> Can anybody tell, how to fill a table with large number of entries ? >>=20 >> Sure, It can be done by standard method by ./ipfw table 10 add >> xxx.xxx.xxx.xxx in a script, but each entry takes couple of seconds = to >> be placed into a table: >>=20 >> ./ipfw table 10 add 192.168.10.50 >> connected to 127.0.0.1:5555 >>=20 >> And takes many hours to do all job. >>=20 >> May be there is a way to open a socket and place a bulk commands, for >> example: >> telnet localhost 5555 >> table 10 add xxx.xxx.xxx.xxx >>=20 >> But it doesn't work as written above. >>=20 >> May be Senior Luigi can explane how to do such work as fast as it >> done by ordinary ipfw ? >>=20 >> Best regards >> Azamat >> AkNet ISP >>=20 >> _______________________________________________ >> freebsd-net@freebsd.org mailing list >> http://lists.freebsd.org/mailman/listinfo/freebsd-net >> To unsubscribe, send any mail to = "freebsd-net-unsubscribe@freebsd.org" >=20 >=20 >=20 > --=20 > = -----------------------------------------+------------------------------- > Prof. Luigi RIZZO, rizzo@iet.unipi.it . Dip. di Ing. = dell'Informazione > http://www.iet.unipi.it/~luigi/ . Universita` di Pisa > TEL +39-050-2211611 . via Diotisalvi 2 > Mobile +39-338-6809875 . 56122 PISA (Italy) > = -----------------------------------------+------------------------------- >=20