Re: Throughput extremely decreases when IPFW 7000 mac based rules activated

From: Andrey V. Elsukov <>
Date: Mon, 16 Aug 2021 13:57:36 UTC
10.08.2021 08:08, Eugene Grosbein пишет:
> Such ruleset could decrease filtering overhead several times but I'm
> afraid that ipfw is not right tool for this task at the moment.
> ipfw has "tables" to optimize large list matching and they perform
> great but for layer3 IP matching, not for layer2 MAC matching.

We have a patch that adds ability to keep MAC addresses in the tables. I
hope we will push it into upstreem soon.

WBR, Andrey V. Elsukov