Re: ipfilter 4.1.6 won't build on FreeBSD5.3 amd64 (fwd)

2005-03-09 Thread Łukasz Bromirski
Tony Sarendal wrote: None of our 7200's will come anyway near those numbers. Are you sure it's cisco you are using =) ;) I can't argue for any 7200 in any situation, but again let me repeat, that the numbers I gave are for pure, fast-switched/CEFed routing. I think this discussion should migrate to

Re: ipfilter 4.1.6 won't build on FreeBSD5.3 amd64 (fwd)

2005-03-09 Thread Tony Sarendal
On Tuesday 08 March 2005 22:15, Åukasz Bromirski wrote: > > Yes, the 7206VXR with NPE-G1 can quite easily do 1Mpps, but the > figures usually published are for routing. FreeBSD will also do > this on properly configured hardware - google should return some > useful usenet posts and discussions. >

Re: ipfilter 4.1.6 won't build on FreeBSD5.3 amd64 (fwd)

2005-03-09 Thread Łukasz Bromirski
Hi Goran, On my NPE-G1 running just IOS 12.3(12a) cpu utilization was something like 70-90% but with IOS 12.3(11)T3 it is 20% since this one has NAT inside CEF Yes, exactly. However if you compare prices of PC hardware and Cisco hardware > decent PC hardware with FBSD seems like more acceptable s

Re: ipfilter 4.1.6 won't build on FreeBSD5.3 amd64 (fwd)

2005-03-08 Thread Goran Gajic
On my NPE-G1 running just IOS 12.3(12a) cpu utilization was something like 70-90% but with IOS 12.3(11)T3 it is 20% since this one has NAT inside CEF and yes using small portions of address for NAT pool will reduce CPU utilization and will improve NAT on 7206. However if you compare prices of P

Re: ipfilter 4.1.6 won't build on FreeBSD5.3 amd64 (fwd)

2005-03-08 Thread Łukasz Bromirski
Goran Gajic wrote: Actually I was interested if Dual Opteron with FBSD5.3 can compare with Cisco7206 with NPE-G1 running only for NAT You'll need good motherboard, NICs, 1-2GB of RAM and quite capable CPU. Two won't help much, but sometimes the motherboards for two CPUs provide higher standard (sep

Re: ipfilter 4.1.6 won't build on FreeBSD5.3 amd64 (fwd)

2005-03-08 Thread Goran Gajic
Actually I was interested if Dual Opteron with FBSD5.3 can compare with Cisco7206 with NPE-G1 running only for NAT purpose of some 7000 hosts (and sadly more then ~80k pps can easly bring it down and no one can comfirm that 7206 with NPE-G1 can actually process 1M pps:). Ipfilter that is include

Re: ipfilter 4.1.6 won't build on FreeBSD5.3 amd64 (fwd)

2005-03-08 Thread Goran Gajic
Here is diff that makes ipfilter 4.1.6 able to compile on amd64 as kernel option IPFILTER: --- ip_frag.c Tue Mar 8 13:51:04 2005 +++ ip_frag.c Tue Mar 8 14:53:46 2005 @@ -391,7 +398,7 @@ WRITE_ENTER(&ipf_ipidfrag); fra = ipfr_newfrag(fin, 0, ipfr_ipidtab); if (fra !=

Re: ipfilter 4.1.6 won't build on FreeBSD5.3 amd64 (fwd)

2005-03-07 Thread c0ldbyte
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 7 Mar 2005, Goran Gajic wrote: Hi, I have tried to build ipfilter 4.1.6 as module and as part of kernel on FreeBSD 5.3 on amd64 but in both cases I have failed. When I use option IPFILTER in kernel config this is what I get: cc -c -O2 -frename

ipfilter 4.1.6 won't build on FreeBSD5.3 amd64 (fwd)

2005-03-07 Thread Goran Gajic
Hi, I have tried to build ipfilter 4.1.6 as module and as part of kernel on FreeBSD 5.3 on amd64 but in both cases I have failed. When I use option IPFILTER in kernel config this is what I get: cc -c -O2 -frename-registers -pipe -fno-strict-aliasing -Wall -Wredundant-decls -Wnested-externs -Ws