IPFW Table Size

Korodev korodev at gmail.com
Fri May 3 18:02:31 UTC 2013


I currently have some firewall/routing devices running 8.2 and 9.1 with
ipfw and I'm interested in blocking large groups of IP addresses. The man
pages explain that the table lookup is implemented using a radix tree, but
what I'm most interested in is the performance differences in using a
single table as opposed to multiple tables split up with N addresses each
and what the optimal N (number of addresses in each table) would be.

\\korodev


More information about the freebsd-ipfw mailing list