about the performance of netfilter

• Next message: Andi Kleen: "Re: type safe lists (was Re: PATCH: type safe(r) list_entry repacement: generic_out_cast)"
• Previous message: Bartlomiej Zolnierkiewicz: "Re: [patch] irqlock patch 2.5.27-H4"
• Next in thread: Rusty Russell: "Re: about the performance of netfilter"
• Reply: Rusty Russell: "Re: about the performance of netfilter"
• Reply: Harald Welte: "Re: about the performance of netfilter"
• Reply: Bill Davidsen: "Re: about the performance of netfilter"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

we use a linux router. i just tested the performance of the router. when the kernel is build without netfilter support,the throughput of 64bytes frame is about 45%. when i build the kernel with netfilter (only the ip_filter module),the throughput dropped to 24%, without any rules.
so is there some way to improve the performance? i just want some simple packet filter. is netfilter no so good on the performance compare to ipchains due to the improved functionality?
please cc. thanks.

regards,

zheng chuanbo
zhengcb@netpower.com.cn

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

• Next message: Andi Kleen: "Re: type safe lists (was Re: PATCH: type safe(r) list_entry repacement: generic_out_cast)"
• Previous message: Bartlomiej Zolnierkiewicz: "Re: [patch] irqlock patch 2.5.27-H4"
• Next in thread: Rusty Russell: "Re: about the performance of netfilter"
• Reply: Rusty Russell: "Re: about the performance of netfilter"
• Reply: Harald Welte: "Re: about the performance of netfilter"
• Reply: Bill Davidsen: "Re: about the performance of netfilter"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b29 : Tue Jul 30 2002 - 14:00:15 EST