Temporary freezes on a NAT firewall

[Svata Dedic]

Hello,

seeking an advice: we are running a NAT firewall on a SMP machine (2x
dualcore Xeon) Linux with kernel 2.6.16.x. The machine works OK, except
that when I access /proc/net/ip_conntrack, the networking freezes -
packets do not get through the NAT machine until the ip_conntrack is
processed (typically copied somewhere else or grep-ed).

It is a REALLY huge table (~100k connections) and the box forwards about
40 kpps, so there may be some lock contention issues.

Any ideas what I could tune or do differently ?

Thanks for your help,
-Svata

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
______________________________________________________________________
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html