On 02/21/11 07:57, Atte Peltomäki wrote:
PF is simply too slow. It does have good functionality and it's easy to use, but it doesn't scale beyond small/medium networks. I stress-tested it some time ago and OpenBSD/pf could get a combined throughput of around 1.6Gbps. FreeBSD/pf got a little better, but not so that it would really mean much.
What was the max {memory,pci,processor} bandwitdth on the machine under test?
Have you stress tested NPF?
