Re: pf performance?

2013-04-27 Thread Lev Serebryakov
Hello, Gleb. You wrote 27 апреля 2013 г., 9:53:49: GS> On Fri, Apr 26, 2013 at 06:22:18PM +0200, Olivier Cochard-Labb? wrote: GS> But I'd like someone with decent hardware and traffic to test that first. I GS> don't want to do this convertsion blindly w/o benchmark and stability test. GS> Unfortun

Re: pf performance?

2013-04-27 Thread Jim Thompson
On Apr 27, 2013, at 12:53 AM, Gleb Smirnoff wrote: > Unfortunately, as you see, most people avoid running head, waiting at least > for 10.0-RELEASE, or even for pfSense catching up on FreeBSD 10. So probably > this change won't be tested soon, and thus won't happen soon, Gleb, As a minor p

Re: pf performance?

2013-04-27 Thread Gleb Smirnoff
Jim, On Sat, Apr 27, 2013 at 07:58:04AM -0500, Jim Thompson wrote: J> > Unfortunately, as you see, most people avoid running head, waiting at least for 10.0-RELEASE, or even for pfSense catching up on FreeBSD 10. So probably this change won't be tested soon, and thus won't happen soon, J> As a

Re: PF IPv6 fragment support

2013-04-27 Thread Rainer Bredehorn
Hi Jason! Am 27.04.2013 03:39, schrieb Jason Fesler: > On Fri, Apr 26, 2013 at 1:26 AM, Rainer Bredehorn wrote: >> I've modified the kernel PF implementation to pass IPv6 fragments. >> The first fragment is handled by the PF rules of course ignoring possible >> checksums. > > Are you checking L