Date: Sat, 20 Aug 2011 14:10:59 +0000 From: "Poul-Henning Kamp" <phk@phk.freebsd.dk> To: Robert Watson <rwatson@FreeBSD.org> Cc: Lev Serebryakov <lev@FreeBSD.org>, freebsd-arch@FreeBSD.org Subject: Re: 10gbps scalability (was: Re: FreeBSD problems and preliminary ways to solve) Message-ID: <5299.1313849459@critter.freebsd.dk> In-Reply-To: Your message of "Sat, 20 Aug 2011 12:38:26 %2B0100." <alpine.BSF.2.00.1108201234280.4529@fledge.watson.org>
next in thread | previous in thread | raw e-mail | index | archive | help
In message <alpine.BSF.2.00.1108201234280.4529@fledge.watson.org>, Robert Watso n writes: >Part of the key here will be reworking things like ipfw(4) Here is how to do it: Compile IPFW rules to C-code, compile C-code to KLD, load KLD and hook the firewall rules. If the C-code is designed smartly, the C-compiler can optimize to insanely efficient code. The same semantics as today can be preserved with respect to counters and dynamic addition/removal of rules, with a little bit of creative thinking about data structures. Somebody[tm] did that long ago, but never contributed the patches back once The Mgt[tm] realized what performance we were talking about. -- Poul-Henning Kamp | UNIX since Zilog Zeus 3.20 phk@FreeBSD.ORG | TCP/IP since RFC 956 FreeBSD committer | BSD since 4.3-tahoe Never attribute to malice what can adequately be explained by incompetence.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5299.1313849459>