Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 30 Sep 2002 20:19:00 +0200
From:      Andre Oppermann <oppermann@pipeline.ch>
To:        Luigi Rizzo <rizzo@icir.org>
Cc:        freebsd-net@FreeBSD.ORG, jeker@n-r-g.com
Subject:   Re: New natd available
Message-ID:  <3D989594.DA0D0497@pipeline.ch>
References:  <3D9861CA.F3225DE7@pipeline.ch> <20020930103617.A4019@iguana.icir.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Luigi Rizzo wrote:
> 
> Andre,
> could you briefly comment how the new libalias+natd differ
> (or are planned to differ) from the old one -- e.g. do
> they implement keepalives, move-to-front of sessions in the
> hash chains, fixe to known bugs in the old one ?

The new one has a way more powerful configuration syntax and
supports new modes like aliasing to more than one outside
address.

> One common complaint with the old libalias is that
> performance tends to trash with time -- this seems to be
> due to the very long timeout (24hrs ?) for sessions, coupled
> to the fact that newly created sesssions are appended to
> the end of the hash chains so over time the lookup times
> tend to become larger and larger.

This hasn't been fixed yet.

> One easy fix to this behaviour is to move to the front of
> the hash chain a session descriptor upon a successful lookup.
> This keeps fresh sessions near the head of the chain while
> stale ones drift towards the end.

We'll do this.

Could you have a more detailed look at the new natd maybe?

-- 
Andre


>         thanks
>         luigi
> 
> > Hello all
> >
> > In the FreeBSD May-June 2002 Status Report we have announced a natd
> > rewrite to make it's configuration options more powerful and support
> > more ip addresses to nat to.
> >
> > The first functional preview is available here:
> >
> >  http://diehard.n-r-g.com/stuff/freebsd/
> >
> > Please check this out and test it with real traffic. We'd appreciate
> > any feedback about the syntax and any bugs. It'll get some more style
> > treatment before declaring it for full public consumption.
> >
> > Next in row is the tcphostcache in a couple of days. After that the
> > new routing table is coming.
> >
> > --
> > Andre
> >
> > To Unsubscribe: send mail to majordomo@FreeBSD.org
> > with "unsubscribe freebsd-net" in the body of the message

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3D989594.DA0D0497>