Date: Sun, 25 Aug 2019 23:37:34 +0300 From: "Andrey V. Elsukov" <bu7cher@yandex.ru> To: Eugene Grosbein <eugen@grosbein.net>, Victor Gamov <vit@otcnet.ru>, freebsd-net@freebsd.org Subject: Re: finding optimal ipfw strategy Message-ID: <270233d9-fcdb-fee9-2557-c2d1ec7bf9e6@yandex.ru> In-Reply-To: <4ff39c8f-341c-5d72-1b26-6558c57bff8d@grosbein.net> References: <f38b21a5-8f9f-4f60-4b27-c810f78cdc88@otcnet.ru> <4ff39c8f-341c-5d72-1b26-6558c57bff8d@grosbein.net>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --jKgCVaeKqqox6f9YS6bpsYK19q6peySg8 Content-Type: multipart/mixed; boundary="KAmcFqsaWyFSILrcG213ymcDo3vK5awES"; protected-headers="v1" From: "Andrey V. Elsukov" <bu7cher@yandex.ru> To: Eugene Grosbein <eugen@grosbein.net>, Victor Gamov <vit@otcnet.ru>, freebsd-net@freebsd.org Message-ID: <270233d9-fcdb-fee9-2557-c2d1ec7bf9e6@yandex.ru> Subject: Re: finding optimal ipfw strategy References: <f38b21a5-8f9f-4f60-4b27-c810f78cdc88@otcnet.ru> <4ff39c8f-341c-5d72-1b26-6558c57bff8d@grosbein.net> In-Reply-To: <4ff39c8f-341c-5d72-1b26-6558c57bff8d@grosbein.net> --KAmcFqsaWyFSILrcG213ymcDo3vK5awES Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 24.08.2019 22:34, Eugene Grosbein wrote: > If you are concerned of performance, general rule applies: less checks,= better performance. >=20 > First, use 'out xmit' instead of 'out via'. They are semantically equal= and this is micro-optimization > but it still saves extra check unneeded when combined with "out" keywor= d. >=20 > Also, you should use old table numbers instead of new symbolic table na= mes > when you have many rules checking for interface names and much traffic > because checks for numbered tables are slightly more efficient. > You may use symbolic names still at source level: There isn't any old tables, all tables have symbolic names. Even when you are creating "table(1)", its name is converted into symbolic name. --=20 WBR, Andrey V. Elsukov --KAmcFqsaWyFSILrcG213ymcDo3vK5awES-- --jKgCVaeKqqox6f9YS6bpsYK19q6peySg8 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Comment: Using GnuPG with Thunderbird - https://www.enigmail.net/ iQEzBAEBCAAdFiEE5lkeG0HaFRbwybwAAcXqBBDIoXoFAl1i8ZMACgkQAcXqBBDI oXodiAf9Fzb437A8bGQkKOxGR0NIJTS5vazLwMmq1dyqz5mkCleCCHI6v+4MRkWG aKIoF3RlCT+cGf50h+spsngimfUL3PjjQY/fdIwqv0jcf8ZKnlce6sYgR/JwX4ik O3s8gZKfNUALSewTSxoY4RvmtJohJukrT7nhlMZd0lEBD6FKHiJbd7Dh2Q2gOs2c OoneDepaTC0cjXM9ANN6tDtqfFfwW/O3YlOUTAEmfAdEUovgEiOdSroRW68A+asm C5Cn30RXfSJGi09YlCwyXVgY/TV+YeS20wneEOBJMt1jyojrc2m9ZSSL5FmtuGeI xXQ9xpOizu5saiStKsRzn1sN0OcVJg== =oaM3 -----END PGP SIGNATURE----- --jKgCVaeKqqox6f9YS6bpsYK19q6peySg8--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?270233d9-fcdb-fee9-2557-c2d1ec7bf9e6>