Re: Throughput extremely decreases when IPFW 7000 mac based rules activated

From: Andrey V. Elsukov <bu7cher_at_yandex.ru>
Date: Mon, 16 Aug 2021 16:57:36 +0300
10.08.2021 08:08, Eugene Grosbein пишет:
> Such ruleset could decrease filtering overhead several times but I'm
> afraid that ipfw is not right tool for this task at the moment.
> 
> ipfw has "tables" to optimize large list matching and they perform
> great but for layer3 IP matching, not for layer2 MAC matching.

We have a patch that adds ability to keep MAC addresses in the tables. I
hope we will push it into upstreem soon.

-- 
WBR, Andrey V. Elsukov


Received on Mon Aug 16 2021 - 13:57:36 UTC

Original text of this message