Re: Speed issues with bridge firewall

2003-09-01 Thread Ed White
On Monday 01 September 2003 19:20, Mathew Binkley wrote: > So our bridging firewall achieves ~84% of full line speed. However, > during testing the firewall had a load level of 4.3. There doesn't > appear to be any packet loss, but I'm not sure if it is affecting > latency or not. Does anyone kn

Re: Speed issues with bridge firewall

2003-09-01 Thread Max Laier
> On Monday 01 September 2003 19:20, Mathew Binkley wrote: > > So our bridging firewall achieves ~84% of full line speed. However, > > during testing the firewall had a load level of 4.3. There doesn't > > appear to be any packet loss, but I'm not sure if it is affecting > > latency or not. Does

Re: Speed issues with bridge firewall

2003-09-01 Thread Henning Brauer
On Mon, Sep 01, 2003 at 12:20:04PM -0500, Mathew Binkley wrote: > The firewall box is a SuperMicro 1U box with ServerWorks GC-LE chipset, > dual 1.8 GHz Xeons, 1 GB RAM, 40 gig hard drive, and two gigabit NIC's > (one Intel, the other NatSemi 83820). OpenBSD doesn't support SMP, so > only one o

RE: Speed issues with bridge firewall

2003-09-01 Thread Dom De Vitto
ECTED] On Behalf Of Henning Brauer Sent: Monday, September 01, 2003 8:47 PM To: [EMAIL PROTECTED] Subject: Re: Speed issues with bridge firewall On Mon, Sep 01, 2003 at 12:20:04PM -0500, Mathew Binkley wrote: > The firewall box is a SuperMicro 1U box with ServerWorks GC-LE > chipset, >

Re: Speed issues with bridge firewall

2003-09-02 Thread Damien Miller
Dom De Vitto wrote: Damn straight. That's 94% of wire speed! But largely irrelevant, as it is packets per second and not bytes per second that matter. As it is probably interrupts that are loading the box and not packet processing, you could perster tedu@ for his devpoll patch, but to quote his

RE: Speed issues with bridge firewall

2003-09-02 Thread Amir Seyavash Mesry
received this communication in error, and delete the copy you received. Thank you. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Henning Brauer Sent: Monday, September 01, 2003 3:47 PM To: [EMAIL PROTECTED] Subject: Re: Speed issues with bridge firewall On

Re: Speed issues with bridge firewall

2003-09-02 Thread Attila Nagy
Damien Miller wrote: I believe the fastest appliance out there currently is the Cisco PIX535, coming in at a max of 1.7gb/s, but the other firewall appliances around are way behind that and are well sub-1gb/s. Nokia IP1260 w/FW-1 quotes 4.2Gbps NetScreen 5400 quotes 12Gbps You can find even gre

Re: Speed issues with bridge firewall

2003-09-02 Thread Henning Brauer
On Tue, Sep 02, 2003 at 12:12:59AM -0400, Amir Seyavash Mesry wrote: > Henning/Daniel, is there any plans to implement polling in 3.4? in 3.4 for sure not. even later - nobody has yet shown that it pays out. -- Henning Brauer, BS Web Services, http://bsws.de [EMAIL PROTECTED] - [EMAIL PROTECTED]

Re: Speed issues with bridge firewall

2003-09-02 Thread Diana Eichert
Maybe not at 1Gb, but at 10Gb polling comes in handy, at least that's what we've seen with tests run using Intel 10Gb NIC under Linux and FreeBSD. once upon a time a famous beer drinker said: On Tue, Sep 02, 2003 at 12:12:59AM -0400, Amir Seyavash Mesry wrote: > Henning/Daniel, is there any pla

Re: Speed issues with bridge firewall

2003-09-02 Thread Mathew Binkley
Henning Brauer wrote: > On Tue, Sep 02, 2003 at 12:12:59AM -0400, Amir Seyavash Mesry wrote: > >> Henning/Daniel, is there any plans to implement polling in 3.4? > > > in 3.4 for sure not. > even later - nobody has yet shown that it pays out. If anyone's interested I'm willing to test a patch (as