[no subject]

y=ZG@mail.gmail.com> <4D3ADD81.8040007@web.de> <20110221135706.GD59767@ass.kameli.org>
From: Chris Turner <c.turner@199technologies.org>
Subject: Re: Time to let go of ipfilter
Date: Tue, 22 Feb 2011 02:20:59 -0600
BestServHost: crater.dragonflybsd.org
List-Post: <mailto:kernel@crater.dragonflybsd.org>
List-Subscribe: <mailto:kernel-request@crater.dragonflybsd.org?body=subscribe>
List-Unsubscribe: <mailto:kernel-request@crater.dragonflybsd.org?body=unsubscribe>
List-Help: <mailto:kernel-request@crater.dragonflybsd.org?body=help>
List-Owner: <mailto:owner-kernel@crater.dragonflybsd.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
In-Reply-To: <20110221135706.GD59767@ass.kameli.org>
Sender: kernel-errors@crater.dragonflybsd.org
Errors-To: kernel-errors@crater.dragonflybsd.org
Lines: 15
NNTP-Posting-Host: 216.240.41.25
X-Trace: 1298363700 crater_reader.dragonflybsd.org 936 216.240.41.25
Xref: crater_reader.dragonflybsd.org dragonfly.kernel:14908

On 02/21/11 07:57, Atte Peltomäki wrote:

> PF is simply too slow. It does have good functionality and it's easy to
> use, but it doesn't scale beyond small/medium networks. I stress-tested
> it some time ago and OpenBSD/pf could get a combined throughput of
> around 1.6Gbps. FreeBSD/pf got a little better, but not so that it would
> really mean much.

What was the max {memory,pci,processor} bandwitdth on the machine under 
test?

Have you stress tested NPF?