Hi, On Wed, Jul 20, 2016 at 4:59 AM, Scott Burns <[email protected]> wrote: > Has anyone used multiple vmx NICs (VMWare virtual NICs on VMWare ESXI 5.5+) > when implementing a NetBSD ipf/ipnat firewall using NET_MPSAFE? > > Per this article it appears to result in a performance increase: > > > https://www.netbsd.org/gallery/presentations/ozaki-r/2015_AsiaBSDCon/ABC2015 > -P4C-paper.pdf > > but is it ready for prime time?
A kernel of -current with NET_MPSAFE can achieve similar results of the paper. However, the results in the paper is based on Layer 2 forwarding using bridge(4) with wm(4), and you cannot gain benefits by the improvement. Current status and our plan for your environment: - vmx: no difference between NET_MPSAFE on and off for now. We have some patches that make vmx MP-safe and will merge them at some time (not soon though). - IP forwarding: MP-ification is ongoing, but not finished. It's hopefully finished in this year. - ipf/ipnat: MP-ification is not planned (by us). I think we recommend using npf for multi-core environments. Regards, ozaki-r
