Hello, All (NetMap dev. Team) !
We use netmap-ipfw server for traffic pre-processing before the main
filtering bridge (ordinary dummynet) and met the situation, that
netmap-ipfw dramatically degrades perfomance (point B below) from stable
work (point A below) after some actions with ruleset.
Hello, All!
In addition to previous info I can say, that netmap-ipfw takes about
95% in top -PHS, even if firewall is fully open:
60 root 1000 885M 342M CPU00 621:31 92.38% kipfw
when first rule is "allow ip from any to any"
May be it needs more RAM ? current
t
6Gbit/s) to 330Mbytes/s (2.6Gbit/s), delay increases from 65ms to 250ms
and high percentage of drops.
Is it real limit of using netmap-ipfw ? We can give any additional info
if it will be usefull to expand limits of kipfw.
With regards and happy New Year !
Azamat B. Umurzakov
Julian,
I tested your method, result is negative, I see following:
First Console:
root@testbridge:/usr/local/netmap-ipfw/netmap-ipfw/ipfw # more
tab-cont.txt | ./ipfw /dev/stdin
connected to 127.0.0.1:
^C
Freeze. Have to interrupt by CTRL-C after 30 sec.
Second Console:
root@testbridge:/u
Dear Luigi
Today I installed the last distribution of FreeBSD-Stable 10.1 and
took netmap-ipfw from your place by:
git clone https://code.google.com/p/netmap-ipfw/
(hope the latest version)
netmap compiled into kenel by
devicenetmap
Test computer i7-3770 (3.4Ghz), network card Intel DA-520
Eugene,
sure, first we tried was a method with file.
But after first 2-3 rules (table 10 add xxx.xxx.xxx.xxx) it hangs and
we loose console interaction.
(the last FreeBSD-Stable 10.1)
It needs to open new console and kill a process ./ipfw
/usr/local/.../rules.txt
And ./ipfw table 10 list sh
There is an error with this email account.
Please contact us.
http://itmediagate.com/contact.htm
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
Unique Messaging Solutions:
It's not just about email anymore. Built on advanced messaging technology,
we offer Internet messaging infrastructure solutions for corporations and
service providers such as ISPs, telcos and portals.
Fully scalable, our solutions enable customers to manage the technol
