ah, you mean nat? In OpenBSD all firewall functions (uhmm, almost all, to be technically correct, in the presence of [t]ftp-proxy) i.e. packet filtering, NAT, shaping are done on the kernel level.
On Tue, 1 Nov 2011 12:26:30 +0400 ZZ Wave <[email protected]> wrote: > For example, in FreeBSD there is "slow" pf in userspace and "fast" > kernel-level netgraph. > > 2011/11/1 Gregory Edigarov <[email protected]> > > > On Tue, 1 Nov 2011 11:17:56 +0400 > > ZZ Wave <[email protected]> wrote: > > > > > What solution should be used for traffic shaping on real-life, > > > "production" gateways with tens and hundreds users? PF queues > > > seem to be too "userspace"-ish and CPU consuming. > > > > Pardon? > > What do you mean "userspace"-ish ? > > > > > > -- > > With best regards, > > Gregory Edigarov
