* Chris Cappuccio <[EMAIL PROTECTED]> [2006-10-10 20:56]:
> Ronnie Garcia [EMAIL PROTECTED] wrote:
> > 
> > Will pfsync just handle the split sessions happily ? Will it handle the 
> > load for, say, 10k pps ?
> > 
> 
> with a soekris net4501? no
> 
> with a 500mhz celeron or higher? yes

uh, careful. pfsync is not realtime, it is only near-realtime, so 
a tcp session coming in throught fw A and going out through B _might_ 
be problematic wrt window scaling and friends. Note the "might", it 
depends on a number of factors.

and no, it is not feasable to make pfsync realtime.

-- 
Henning Brauer, [EMAIL PROTECTED], [EMAIL PROTECTED]
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting - Hamburg & Amsterdam

Reply via email to