Re: [RFC] Enabling IPFIREWALL_FORWARD in run-time

2012-10-23 Thread n j
> On 10/19/12 4:25 AM, Andrey V. Elsukov wrote: >> >> Hi All, >> >> Many years ago i have already proposed this feature, but at that time >> several people were against, because as they said, it could affect >> performance. Now, when we have high speed network adapters, SMP kernel >> and network st

Re: [RFC] Enabling IPFIREWALL_FORWARD in run-time

2012-10-21 Thread Julian Elischer
On 10/19/12 4:25 AM, Andrey V. Elsukov wrote: Hi All, Many years ago i have already proposed this feature, but at that time several people were against, because as they said, it could affect performance. Now, when we have high speed network adapters, SMP kernel and network stack, several locks a

Re: [RFC] Enabling IPFIREWALL_FORWARD in run-time

2012-10-21 Thread Eitan Adler
On 19 October 2012 07:25, Andrey V. Elsukov wrote: > Hi All, > > Many years ago i have already proposed this feature, but at that time > several people were against, because as they said, it could affect > performance. Now, when we have high speed network adapters, SMP kernel > and network stack,

Re: [RFC] Enabling IPFIREWALL_FORWARD in run-time

2012-10-19 Thread Julian Elischer
On 10/19/12 4:25 AM, Andrey V. Elsukov wrote: Hi All, Many years ago i have already proposed this feature, but at that time several people were against, because as they said, it could affect performance. Now, when we have high speed network adapters, SMP kernel and network stack, several locks a

Re: [RFC] Enabling IPFIREWALL_FORWARD in run-time

2012-10-19 Thread Alexander V. Chernikov
On 19.10.2012 18:05, Andre Oppermann wrote: On 19.10.2012 14:18, Andrey V. Elsukov wrote: On 19.10.2012 16:02, Andre Oppermann wrote:>> http://people.freebsd.org/~ae/pfil_forward.diff Also we have done some tests with the ixia traffic generator connected via 10G network adapter. Tests have sho

Re: [RFC] Enabling IPFIREWALL_FORWARD in run-time

2012-10-19 Thread Andre Oppermann
On 19.10.2012 14:18, Andrey V. Elsukov wrote: On 19.10.2012 16:02, Andre Oppermann wrote:>> http://people.freebsd.org/~ae/pfil_forward.diff Also we have done some tests with the ixia traffic generator connected via 10G network adapter. Tests have show that there is no visible difference, and th

Re: [RFC] Enabling IPFIREWALL_FORWARD in run-time

2012-10-19 Thread Ian Smith
On Fri, 19 Oct 2012 15:25:24 +0400, Andrey V. Elsukov wrote: > Hi All, > > Many years ago i have already proposed this feature, but at that time > several people were against, because as they said, it could affect > performance. Now, when we have high speed network adapters, SMP kernel > and

Re: [RFC] Enabling IPFIREWALL_FORWARD in run-time

2012-10-19 Thread Andrey V. Elsukov
On 19.10.2012 16:02, Andre Oppermann wrote:>> http://people.freebsd.org/~ae/pfil_forward.diff >> >> Also we have done some tests with the ixia traffic generator connected >> via 10G network adapter. Tests have show that there is no visible >> difference, and there is no visible performance degradat

Re: [RFC] Enabling IPFIREWALL_FORWARD in run-time

2012-10-19 Thread Andre Oppermann
On 19.10.2012 13:25, Andrey V. Elsukov wrote: Hi All, Many years ago i have already proposed this feature, but at that time several people were against, because as they said, it could affect performance. Now, when we have high speed network adapters, SMP kernel and network stack, several locks a

Re: [RFC] Enabling IPFIREWALL_FORWARD in run-time

2012-10-19 Thread Zamri Besar
On Oct 19, 2012 7:25 PM, "Andrey V. Elsukov" wrote: > > Hi All, > > Many years ago i have already proposed this feature, but at that time > several people were against, because as they said, it could affect > performance. Now, when we have high speed network adapters, SMP kernel > and network stac