Date: Mon, 06 Sep 2010 10:49:08 +0200 From: Ian FREISLICH <ianf@clue.co.za> To: Peter Reo Molnar <peter@3mail4.co.uk> Cc: freebsd-current@freebsd.org Subject: Re: significantly slow IPFW + NATD + amd64 Message-ID: <E1OsXO0-00017U-Fa@clue.co.za> In-Reply-To: <4C84A44D.90403@3mail4.co.uk> References: <4C84A44D.90403@3mail4.co.uk> <4C825094.5040204@secover.com.br> <20100905155311.GA48095@onelab2.iet.unipi.it> <4C84364D.9070700@DataIX.net>
next in thread | previous in thread | raw e-mail | index | archive | help
Peter Reo Molnar wrote: > Hello, > > I tried setup NAT with IPFW, compiled my kernel and I found that there > is very slow connection. > After I disabled NAT and IPFW then speed was increased. > > 64-bit FreeBSD 9-CURRENT : > With IPFW: 1.2 MB/sec > Without IPFW: 33 MB/sec > > > my ipfw work with i386 (stable) without speed decreasing: > > fw.test.conf: > -f flush > add 00050 divert 8668 ip4 from any to any via re0 > add 00100 allow ip from any to any via lo0 > add 00200 deny ip from any to 127.0.0.0/8 > add 00300 deny ip from 127.0.0.0/8 to any This looks like you're using the old style NAT - divert to userland. That has always performed poorly. Perhaps not as poorly as this though. How much CPU is natd consuming? Have you considered using in-kernel NAT? See the 'NETWORK ADDRESS TRANSLATION' section in the ipfw manual. It's worth a try. Ian -- Ian Freislich
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?E1OsXO0-00017U-Fa>