Here are the results of the test you have asked : gregober 21:15:31 ~ -> iperf -c 1.2.3.5 ------------------------------------------------------------ Client connecting to 1.2.3.5, TCP port 5001 TCP window size: 129 KByte (default) ------------------------------------------------------------ [ 3] local 192.168.10.2 port 60681 connected with 1.2.3.5 port 5001 [ ID] Interval Transfer Bandwidth [ 3] 0.0-10.0 sec 1.07 GBytes 919 Mbits/sec
Ubuntu 10.04 LTS freshly baked. I think this has to be compared to this test : > WITHOUT PACKET FILTERING ENABLED > gregober 18:40:12 ~ -> iperf -c 1.2.3.4 > ------------------------------------------------------------ > Client connecting to 1.2.3.4, TCP port 5001 > TCP window size: 129 KByte (default) > ------------------------------------------------------------ > [ 3] local 192.168.1.199 port 53391 connected with 1.2.3.4 port 5001 > [ ID] Interval Transfer Bandwidth > [ 3] 0.0-10.0 sec 1.03 GBytes 882 Mbits/sec Results are somewhat similar… My main question is why when filtering is enabled do we loose 75% of the throughput… Is this normal figures or not ? Thank you. Le 7 sept. 2010 à 11:15, Paul Mansfield a écrit : > On 06/09/10 21:58, bsd wrote: >> I have made a simple configuration which looks like that : >> >> Station_1 <<< WAN >>> pfSense_FW <<< LAN >>> Station_2 > > it'd be interesting to compare the same hardware running linux; if you > don't feel like installing, boot a live CD; just ifconfig the > interfaces, and turn on IP routing and disable any filtering thus: > > ifconfig eth0 $WANADDRESS > ifconfig eth1 $LANADDRESS > echo 1 > /proc/sys/net/ipv4/ip_forward > iptables -I FORWARD -j ACCEPT > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > > Commercial support available - https://portal.pfsense.org > ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ Gregober ---> PGP ID --> 0x1BA3C2FD bsd @at@ todoo.biz ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected] Commercial support available - https://portal.pfsense.org
