Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 11 Feb 2002 16:53:54 -0000
From:      "Tariq Rashid" <tariq@inty.net>
To:        <freebsd-net@FreeBSD.ORG>
Subject:   RE: squeeze more performance out of natd?
Message-ID:  <MPENKFCCIIDAJKJJOLBHOEAHCIAA.tariq@inty.net>
In-Reply-To: <004701c1b01e$7039d3f0$361c1a09@gsicomp.on.ca>

next in thread | previous in thread | raw e-mail | index | archive | help


 some tests seems to show that natd's cpu load goes up because we have a
large file descriptor set for select() - this is more of a problem than the
kernelspace/userland packet traversal. the traffic its handling is something
like 1500 low traffic tcp connections to a single server port.

 from doing some rtfm-ing i see that select() is not very scalable - not
good for large fd sets and not good if they are nearly alwats ready for
reading.

 does this sound no too far wrong? (i'm not an expert my any means)

 possible ideas:

	* is doing a select on 1000 file descriptors more efficient than having 10
selects on 100 file descriptors?

	* what about diverting to multiple natd processes?

	* threading? are there any benefits at all in this scenario?

tariq

-----Original Message-----
From: owner-freebsd-net@FreeBSD.ORG
[mailto:owner-freebsd-net@FreeBSD.ORG]On Behalf Of Matthew Emmerton
Sent: 07 February 2002 21:29
To: Tariq Rashid; freebsd-net@FreeBSD.ORG
Subject: Re: squeeze more performance out of natd?



>  i've spent a good number of hours RTFMs, trying to make the best of a bad
> situtaion: userland natd instead of kernel-space nat.

I've been told that if you use ipf and ipnat, then you get the benefit of
kernel-space NAT.  Have you investigated this to see how it compares to
natd/ipfw for your purposes?

--
Matt Emmerton


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message

intY has automatically scanned this email with Sophos Anti-Virus
(www.inty.net)



intY has automatically scanned this email with Sophos Anti-Virus (www.inty.net)



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?MPENKFCCIIDAJKJJOLBHOEAHCIAA.tariq>