Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 9 Jun 2002 23:09:37 -0700
From:      Luigi Rizzo <>
To:        Robert Watson <>
Subject:   Re: New ipfw code available
Message-ID:  <>
In-Reply-To: <>; from on Mon, Jun 10, 2002 at 12:57:44AM -0400
References:  <> <>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
On Mon, Jun 10, 2002 at 12:57:44AM -0400, Robert Watson wrote:
> Sounds very cool indeed.  However, the usual question when hard-coded-ness
> is traded for flexibility is: what's the performance like?  Do you have
> any performance measurements you could tell us about in the before/after
> scenarios?  You mention 'faster' as well as 'flexible', which bodes well
> :-).

i have not run any comparative test yet, that was the point of the
posting, find some good soul who was willing to run the new and old
code and compare performance :)

Anyways in this case (barring stupid bugs in the implementation of
course) it is rather obvious that the new architecture must be
substantially faster -- the fact is, the old ipfw macroinstruction
has to test some 20-25 distinct flags even when there is nothing
to be done, all of which is filtered out by the compiler with the
new approach. Things would be different if the macroinstructions
were executed in hardware, but they were not...


To Unsubscribe: send mail to
with "unsubscribe freebsd-ipfw" in the body of the message

Want to link to this message? Use this URL: <>