Date: Wed, 7 May 2003 11:11:10 -0700 From: Sean Chittenden <sean@chittenden.org> To: Clement Laforet <sheep.killer@cultdeadsheep.org> Cc: Eric Anderson <anderson@centtech.com> Subject: Re: NAT performance tweaks Message-ID: <20030507181110.GN49916@perrin.int.nxad.com> In-Reply-To: <20030507195557.6554155b.sheep.killer@cultdeadsheep.org> References: <3EB67822.3070802@centtech.com> <20030505182756.093fb1c3.sheep.killer@cultdeadsheep.org> <3EB6A0BF.1040803@centtech.com> <20030506042044.GA84589@c7.campus.utcluj.ro> <3EB922B7.2080002@centtech.com> <20030507170155.GA13015@c7.campus.utcluj.ro> <20030507193247.6f60584f.sheep.killer@cultdeadsheep.org> <3EB94516.5070503@centtech.com> <20030507195557.6554155b.sheep.killer@cultdeadsheep.org>
next in thread | previous in thread | raw e-mail | index | archive | help
> > Well, why not make it a /boot/loader.conf settable sysctl, so > > while the system is running, it is "read only", and only settable > > on boot. > > > > Is there a flaw in that thinking? > > It should be great and easily maintainable for sys admins. But I > don't know ipfilter maintainer's point of view :) <moderator_hat /> At this point, given configuration bits/cold facts have been exchanged regarding what are good settings in ip_nat.h, can we please consider this thread dead? If someone would like to send Darren a patch or an email asking him if'd be interested in making some of the ip_nat.h values into sysctl's, that'd be dandy, however I just assume not see this thread wind on about easier configuration of ipfilter and friends. Performance != making sysadmin life easier. -sc -- Sean Chittenden
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030507181110.GN49916>