From owner-freebsd-net Thu Feb 7 4:29:33 2002 Delivered-To: freebsd-net@freebsd.org Received: from vic.inty.net (vic.inty.net [213.38.150.164]) by hub.freebsd.org (Postfix) with ESMTP id 1B5F537B41C for ; Thu, 7 Feb 2002 04:29:30 -0800 (PST) Received: from inty.hq.inty.net ([213.38.150.161]) by vic.inty.net (8.11.3/8.11.3) with ESMTP id g17CTQ250065 for ; Thu, 7 Feb 2002 12:29:27 GMT Received: from tariq ([10.0.1.156]) by inty.hq.inty.net (8.12.1/8.12.1) with SMTP id g17CTQ3a041809 for ; Thu, 7 Feb 2002 12:29:26 GMT From: "Tariq Rashid" To: Subject: squeeze more performance out of natd? Date: Thu, 7 Feb 2002 12:31:59 -0000 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Importance: Normal In-Reply-To: X-Sender-IP: 10.0.1.156 X-INT-DeliveryDone: g17CTQ3a041809 X-suppress-rcpt-virus-notify: yes X-Skip-Virus-Check: yes X-Virus-Checked: 18541 Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org i've spent a good number of hours RTFMs, trying to make the best of a bad situtaion: userland natd instead of kernel-space nat. the only practical advice i found was to increase the maxusers kernel option - we're already at 1024 (with plenty of ram to support it). other advice was to have a streamlined ipfw list and i think mine is. the problem is that high network traffic with natd means that the CPU spends its time doing nat and not paying much attention to anything else. re-niceing it just means lower thoughput. any advice on squeezing more out of natd? * natd spawning other natds? * combinations of command line options? * more kernel parameter tweaking? thanks tariq intY has automatically scanned this email with Sophos Anti-Virus (www.inty.net) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message