Re: [RFC] Enabling IPFIREWALL_FORWARD in run-time

2012-10-21 Thread Eitan Adler
On 19 October 2012 07:25, Andrey V. Elsukov a...@freebsd.org wrote: Hi All, Many years ago i have already proposed this feature, but at that time several people were against, because as they said, it could affect performance. Now, when we have high speed network adapters, SMP kernel and

[RFC] Enabling IPFIREWALL_FORWARD in run-time

2012-10-19 Thread Andrey V. Elsukov
Hi All, Many years ago i have already proposed this feature, but at that time several people were against, because as they said, it could affect performance. Now, when we have high speed network adapters, SMP kernel and network stack, several locks acquired in the path of each packet, and i have

Re: [RFC] Enabling IPFIREWALL_FORWARD in run-time

2012-10-19 Thread Zamri Besar
On Oct 19, 2012 7:25 PM, Andrey V. Elsukov a...@freebsd.org wrote: Hi All, Many years ago i have already proposed this feature, but at that time several people were against, because as they said, it could affect performance. Now, when we have high speed network adapters, SMP kernel and

Re: [RFC] Enabling IPFIREWALL_FORWARD in run-time

2012-10-19 Thread Andre Oppermann
On 19.10.2012 13:25, Andrey V. Elsukov wrote: Hi All, Many years ago i have already proposed this feature, but at that time several people were against, because as they said, it could affect performance. Now, when we have high speed network adapters, SMP kernel and network stack, several locks

Re: [RFC] Enabling IPFIREWALL_FORWARD in run-time

2012-10-19 Thread Andrey V. Elsukov
On 19.10.2012 16:02, Andre Oppermann wrote: http://people.freebsd.org/~ae/pfil_forward.diff Also we have done some tests with the ixia traffic generator connected via 10G network adapter. Tests have show that there is no visible difference, and there is no visible performance degradation.

Re: [RFC] Enabling IPFIREWALL_FORWARD in run-time

2012-10-19 Thread Ian Smith
On Fri, 19 Oct 2012 15:25:24 +0400, Andrey V. Elsukov wrote: Hi All, Many years ago i have already proposed this feature, but at that time several people were against, because as they said, it could affect performance. Now, when we have high speed network adapters, SMP kernel and

Re: [RFC] Enabling IPFIREWALL_FORWARD in run-time

2012-10-19 Thread Alexander V. Chernikov
On 19.10.2012 18:05, Andre Oppermann wrote: On 19.10.2012 14:18, Andrey V. Elsukov wrote: On 19.10.2012 16:02, Andre Oppermann wrote: http://people.freebsd.org/~ae/pfil_forward.diff Also we have done some tests with the ixia traffic generator connected via 10G network adapter. Tests have show

Re: [RFC] Enabling IPFIREWALL_FORWARD in run-time

2012-10-19 Thread Vadim Goncharov
Hi Andre Oppermann! On Fri, 19 Oct 2012 16:05:42 +0200; Andre Oppermann wrote about 'Re: [RFC] Enabling IPFIREWALL_FORWARD in run-time': On 19.10.2012 14:18, Andrey V. Elsukov wrote: On 19.10.2012 16:02, Andre Oppermann wrote: http://people.freebsd.org/~ae/pfil_forward.diff Also we have