Hello Valdrin,
10/25/2023 4:18 PM keltezéssel, Valdrin MUJA írta:
Hello Sam,
I don't have the answer to this question, but I can make a few comments on my
own behalf. Maybe it can give you an idea.
As far as I observed, it is not PF's turn yet. I guess what needs to be done
regarding cloned interfaces such as tun and the ethernet layer will be done
first. In fact, as far as I follow, there are some issues in the UDP_input
section.
I have been somewhat surprised at this information. OpenBSD can use up
to 4 softnet tasks for parallel IP packet forwarding since version 7.2.
Please see "SMP Improvements" in page: https://www.openbsd.org/72.html
Of course, I'm sure a lot will change when PF becomes mp-safe, but I believe
there is still time for that.
PF's performance can reach up to 10Gbps with the right CPU selection.
Expressing traffic in Gbps can be rather ambiguous. What frame size did
you use? 64-byte or 1518-byte? The first one needs 14,880,952pps to
saturate a 10Gbps link, whereas the second one can do it with
812,743pps. Please refer to:
https://datatracker.ietf.org/doc/html/rfc5180#appendix-A.1
Best regards,
Gábor
