From owner-freebsd-net@FreeBSD.ORG Thu Jul 3 10:46:04 2008 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id CE4E41065678 for ; Thu, 3 Jul 2008 10:46:04 +0000 (UTC) (envelope-from if@xip.at) Received: from chile.gbit.at (ns1.xip.at [193.239.188.99]) by mx1.freebsd.org (Postfix) with ESMTP id 292FB8FC1D for ; Thu, 3 Jul 2008 10:46:03 +0000 (UTC) (envelope-from if@xip.at) Received: (qmail 16240 invoked from network); 3 Jul 2008 12:46:01 +0200 Received: from unknown (HELO filebunker.xip.at) (86.59.10.180) by chile.gbit.at with (DHE-RSA-AES256-SHA encrypted) SMTP; 3 Jul 2008 12:46:01 +0200 Date: Thu, 3 Jul 2008 12:46:01 +0200 (CEST) From: Ingo Flaschberger To: Stefan Lambrev In-Reply-To: <486B7C69.1010304@moneybookers.com> Message-ID: References: <4867420D.7090406@gtcomm.net> <200806301944.m5UJifJD081781@lava.sentex.ca> <20080701004346.GA3898@stlux503.dsto.defence.gov.au> <20080701010716.GF3898@stlux503.dsto.defence.gov.au> <486986D9.3000607@monkeybrains.net> <48699960.9070100@gtcomm.net> <20080701033117.GH83626@cdnetworks.co.kr> <4869ACFC.5020205@gtcomm.net> <4869B025.9080006@gtcomm.net> <486A7E45.3030902@gtcomm.net> <486A8F24.5010000@gtcomm.net> <486A9A0E.6060308@elischer.org> <486B41D5.3060609@gtcomm.net> <486B4F11.6040906@gtcomm.net> <486B7C69.1010304@moneybookers.com> User-Agent: Alpine 1.10 (LFD 962 2008-03-14) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII Cc: FreeBSD Net , Paul Subject: Re: Freebsd IP Forwarding performance (question, and some info) [7-stable, current, em, smp] X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Jul 2008 10:46:04 -0000 Dear Stefan, >>> So my maximum without polling is close to 800kpps but if I push that it >>> starts locking me from doing things, or >> >> how many kpps do you want to achieve? > Do not know for Paul but, I want to be able to route (and/or bridge to > handle) 600-700mbps syn flood, > which is something like 1500kpps in every direction. Is it unrealistic? yes, I think so. look at this project: http://yuba.stanford.edu/NetFPGA/ This card(s) could do that. Maximum count of routes seems to be limited, but with lpf it should work. A freebsd-kernel interface is missing. > If the code is optimized to fully utilize MP I do not see a reason why quad > core processor should not be able to do this. > After all single core seems to handle 500kpps, if we utilize four, eight or > even more cores we should be able to route 1500kpps + ? Theres a "sun" used at quagga dev as bgp-route-server. http://quagga.net/route-server.php (but they don't answered my question regarding fw-performance). > I hope TOE once MFCed to 7-STABLE will help too? I don't think toe will help. Kind regards, Ingo Flaschberger