On Wed, May 13, 2009 at 7:47 PM, Scott Ullrich <sullr...@gmail.com> wrote: > On Wed, May 13, 2009 at 8:36 PM, Dimitri Rodis > <dimit...@integritasystems.com> wrote: >> My understanding is that Giant lock is gone from the FreeBSD network stack >> in 8: >> http://unix.derkeiler.com/Mailing-Lists/FreeBSD/arch/2009-04/msg00075.html > > PF is still protected by one "giant" lock and does not scale across all CPUs.
Exactly. The network stack itself not being under giant is the only reason you achieve _any_ amount of scaling past one CPU - that and userland has somewhere to run still :) Ultimately look at it this way - the old engineering idea of having a 'network cpu' is live here...you can have a firewall cpu (although it's certainly not reserved for that purpose), all other cpu's will be used to handle all other tasks. Not quite what you want in a firewall, but it's the best we can do at this time. --Bill --------------------------------------------------------------------- To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
