We use a RedHat 7.3 machine as bridge on a P3 1.8 Ghz with 2 64 bits Gigabit
interfaces. On the machine we have a lot of iptables rules like :
all -- 213.134.225.00.0.0.0/0
all -- 0.0.0.0/0213.134.225.0
TOSall -- 213.134.225.40.0.0.0/0
On Monday 10 March 2003 09:41, Rinse Kloek wrote:
We use a RedHat 7.3 machine as bridge on a P3 1.8 Ghz with 2 64 bits
Gigabit interfaces. On the machine we have a lot of iptables rules like :
all -- 213.134.225.00.0.0.0/0
all -- 0.0.0.0/0
On Monday 10 March 2003 09:41, Rinse Kloek wrote:
We use a RedHat 7.3 machine as bridge on a P3 1.8 Ghz with 2 64 bits
Gigabit interfaces. On the machine we have a lot of iptables rules like
:
all -- 213.134.225.00.0.0.0/0
all -- 0.0.0.0/0
Stef,
We have about 3200 iptables rules on our bridge. I've tested today to
remove 1000 of these rules. The load dropped from about 40% to 25%. So I
think the iptables rule take up the most of the CPU load. Do you think this
is a problem of ineffeciency of iptables or just a 'limitation' in
Stef Coene wrote:
Stef,
We have about 3200 iptables rules on our bridge. I've tested today to
remove 1000 of these rules. The load dropped from about 40% to 25%. So I
think the iptables rule take up the most of the CPU load. Do you think this
is a problem of ineffeciency of iptables
El Mon, Mar 10, 2003 at 08:42:06PM +0200, Evgeni Gechev escribió:
Some topic-related observations:
AMD Athlon XP1700+ (1466), 4xRealtek8139, 5-6Mbit/s - nearly reaching the limit
of machine capabalities
Change the 4 Realtek by 4 REAL nics, as the kernel driver of the
realtek cards sais ...