Hello Gábor, Of course, I am aware of OpenBSD's parallel forwarding implementation. The owner of this thread already mentioned this in his e-mail.
I can reach 10Gbps speed via speedtest.net. Here my gateway is a Server with OpenBSD 7.3 installed... I also get similar values with Cisco-Trex. I can say that OpenBSD is more successful with 1518 byte TCP packets rather than 64 byte UDP packets. ________________________________ From: owner-m...@openbsd.org <owner-m...@openbsd.org> on behalf of Gábor LENCSE <len...@hit.bme.hu> Sent: Wednesday, October 25, 2023 18:47 To: misc@openbsd.org <misc@openbsd.org> Subject: Re: Parallel PF Hello Valdrin, 10/25/2023 4:18 PM keltezéssel, Valdrin MUJA írta: > Hello Sam, > > I don't have the answer to this question, but I can make a few comments on my > own behalf. Maybe it can give you an idea. > As far as I observed, it is not PF's turn yet. I guess what needs to be done > regarding cloned interfaces such as tun and the ethernet layer will be done > first. In fact, as far as I follow, there are some issues in the UDP_input > section. I have been somewhat surprised at this information. OpenBSD can use up to 4 softnet tasks for parallel IP packet forwarding since version 7.2. Please see "SMP Improvements" in page: https://www.openbsd.org/72.html > Of course, I'm sure a lot will change when PF becomes mp-safe, but I believe > there is still time for that. > PF's performance can reach up to 10Gbps with the right CPU selection. Expressing traffic in Gbps can be rather ambiguous. What frame size did you use? 64-byte or 1518-byte? The first one needs 14,880,952pps to saturate a 10Gbps link, whereas the second one can do it with 812,743pps. Please refer to: https://datatracker.ietf.org/doc/html/rfc5180#appendix-A.1 Best regards, Gábor
