em forwarding performance (was Proposed 6.2 em RELEASE patch

Ivan Voras ivoras at fer.hr
Thu Nov 30 09:58:57 PST 2006

Mike Tancsa wrote:

> Yeah I inadvertently slighted the NetBSD folks by leaving them out.  So
> I guess I better give them a try as well.
> The part that really surprises me is the drop in performance as firewall
> rules are added to RELENG_6 and above.  Both LINUX and RELENG_4 seem to
> scale well with the number of rules added but RELENG_6 takes a big drop.

Wasn't there some important setting in ipfw you can tweak if you need
lots of ipfw rules? Size of some hash table?

Quick Googling found this: http://info.iet.unipi.it/~luigi/ip_dummynet/
and net.inet.ip.fw.dyn_buckets: 256. AFAIK the hash size needed to be
tweaked manually in the code, and net.inet.ip.fw.dyn_buckets: 256 is
listed as read-only so this might be it. Maybe mailing Luigi will help
finding out...

More information about the freebsd-performance mailing list