Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 14 Feb 2010 19:56:14 -0600
From:      Brandon Gooch <jamesbrandongooch@gmail.com>
To:        cio@opsylon.com
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Maximum Static NAT sessions under FreeBSD
Message-ID:  <179b97fb1002141756u32629c21qc32dc488e1048823@mail.gmail.com>
In-Reply-To: <20100214161855.06d3d5451f83c4ebc8f77ad593ef1f45.525f4ce7ed.wbe@email06.secureserver.net>
References:  <20100214161855.06d3d5451f83c4ebc8f77ad593ef1f45.525f4ce7ed.wbe@email06.secureserver.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Feb 14, 2010 at 5:18 PM,  <cio@opsylon.com> wrote:
>
> =A0 Hello,
>
> =A0 I was wondering if anyone could t ell me what is the maximum number
> =A0 of static IP NAT sessions FreeBSD can sup port and what are the
> =A0 limiting factors (memory, bus speed, software release , forks, etc)?
>
> =A0 Kind regards,
>
> =A0 < div>
>
> =A0 David Bennett

I'm statically NAT-ting 1024 addresses using the in-kernel NAT via
ipfw. I increased NAT_BUF_LEN in sys/netinet/ip_fw.h from 1024 to
65536 to accommodate the number of rules.

Performance is good; I'm also using dummynet to throttle bandwidth for
each IP. I don't know enough about FreeBSD's internals to give you
info on performance or limiting factors, although I suppose you want a
reasonably powerful CPU (especially if you're using dummynet), but
memory doesn't seem to be a problem:

last pid: 42109;  load averages:  0.97,  0.98,  0.84   up 163+06:11:06 20:3=
3:51
32 processes:  1 running, 31 sleeping
CPU:  0.2% user,  0.0% nice, 50.4% system, 21.6% interrupt, 27.8% idle
Mem: 45M Active, 662M Inact, 203M Wired, 5152K Cache, 111M Buf, 81M Free
Swap: 2048M Total, 2048M Free

It's on a 45 Mbit DS3 (symmetric). The top(1) output above is at about
10 Mbits Rx and 6 Mbits Tx on the box.

-Brandon



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?179b97fb1002141756u32629c21qc32dc488e1048823>