From owner-freebsd-current@FreeBSD.ORG Thu Aug 13 23:58:00 2009 Return-Path: Delivered-To: current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 46B7B106568B; Thu, 13 Aug 2009 23:58:00 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from asmtpout019.mac.com (asmtpout019.mac.com [17.148.16.94]) by mx1.freebsd.org (Postfix) with ESMTP id 3406C8FC15; Thu, 13 Aug 2009 23:58:00 +0000 (UTC) MIME-version: 1.0 Content-transfer-encoding: 7BIT Content-type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Received: from cswiger1.apple.com ([17.227.140.124]) by asmtp019.mac.com (Sun Java(tm) System Messaging Server 6.3-8.01 (built Dec 16 2008; 32bit)) with ESMTPSA id <0KOC00EVM7SN1040@asmtp019.mac.com>; Thu, 13 Aug 2009 15:57:59 -0700 (PDT) Message-id: From: Chuck Swiger To: Tom Uffner In-reply-to: <4A8484E4.6090504@uffner.com> Date: Thu, 13 Aug 2009 15:57:59 -0700 References: <4A8484E4.6090504@uffner.com> X-Mailer: Apple Mail (2.936) Cc: pf@freebsd.org, current@freebsd.org Subject: Re: packet forwarding/firewall performance question X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Aug 2009 23:58:00 -0000 Hi-- On Aug 13, 2009, at 2:25 PM, Tom Uffner wrote: > it is an 800 MHz VIA c3 with a Gigabit switch on the inside interface > and 20 Mbs symetric Fios on the outside. both interfaces are 100 Mbs. I'd done a bit of testing of a VIA EPIA C3 (either a 600 or 800) with the on-board vr0 and an Intel fxp card, and it seemed to go OK up to ~ 8MB/s aka ~65 megabits/sec with a fairly short IPFW-based firewall doing NAT and suchlike. It's probably OK for your purpose, but the EPIA motherboard I had was somewhat flaky. I'd had the vr0 interface get wedged every few days, and trying to use both ATA channels in an UDMA mode tended to result in a total system hang; using only one ATA device, UDMA-100 was fine. I never ended up putting the box into a production use as a consequence. I've had better luck with something like the Soerkris 480x ... -- -Chuck