NAT performance tweaks

[Sean Chittenden]

> > Well, why not make it a /boot/loader.conf settable sysctl, so
> > while the system is running, it is "read only", and only settable
> > on boot.
> > 
> > Is there a flaw in that thinking?
> 
> It should be great and easily maintainable for sys admins.  But I
> don't know ipfilter maintainer's point of view :)

<moderator_hat />

At this point, given configuration bits/cold facts have been exchanged
regarding what are good settings in ip_nat.h, can we please consider
this thread dead?

If someone would like to send Darren a patch or an email asking him
if'd be interested in making some of the ip_nat.h values into
sysctl's, that'd be dandy, however I just assume not see this thread
wind on about easier configuration of ipfilter and friends.
Performance != making sysadmin life easier.

-sc

-- 
Sean Chittenden