Hi, On Wed, Oct 30, 2019 at 3:56 PM Tom Eastep <teas...@shorewall.net> wrote: > > >> I think you example of stress is exactly where Hyper Threading shines and > >> works well. Shorewall reload is something else because it also involves > >> I/O and probably memory interaction. Whenever I saw slowdowns on servers > >> like what you experience here, most of the time it was not directly CPU > >> related.
If and when I run any of these: # ionice -c 3 shorewall check # chrt -i 0 shorewall check then I still experience noticeable ping latency issues (eg. ping to Shorewall FW from LAN host). I guess I've reached a hardware limit. > You could consider moving to Shorewall Lite on your firewall; that would > move the Perl part of reload onto another system (even a Windows system > or a Mac). Thanks for suggesting that. I'll take a look at it asap. Vieri _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
