Performance / connection tracking

[Pasi K�rkk�inen]

(Please CC to me, I'm not on the list)

Hello!

How much performance does connection tracking cost compared to basic
non-connection tracking netfilter-firewall?

Do you see the difference with 10Mbps internet-connection?

When you enable connection tracking (-m state --state foo), does netfilter
need to track ALL connections? or is connection tracking used just for
source/dest networks in that specific rule?


Thanks for you help.


- Pasi K�rkk�inen


                                   ^
                                .     .
                                 Linux
                              /    -    \
                             Choice.of.the
                           .Next.Generation.