finding optimal ipfw strategy

Andrey V. Elsukov bu7cher at yandex.ru
Sun Aug 25 20:40:43 UTC 2019


On 24.08.2019 22:34, Eugene Grosbein wrote:
> If you are concerned of performance, general rule applies: less checks, better performance.
> 
> First, use 'out xmit' instead of 'out via'. They are semantically equal and this is micro-optimization
> but it still saves extra check unneeded when combined with "out" keyword.
> 
> Also, you should use old table numbers instead of new symbolic table names
> when you have many rules checking for interface names and much traffic
> because checks for numbered tables are slightly more efficient.
> You may use symbolic names still at source level:

There isn't any old tables, all tables have symbolic names. Even when
you are creating "table(1)", its name is converted into symbolic name.

-- 
WBR, Andrey V. Elsukov

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 554 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/freebsd-net/attachments/20190825/13f07338/attachment.sig>


More information about the freebsd-net mailing list