All of lore.kernel.org
 help / color / mirror / Atom feed
From: "Mike Olivere" <mikeeo@msn.com>
To: netfilter@lists.netfilter.org
Subject: netfilter under heavy load.
Date: Sun, 5 Jan 2003 10:40:15 -0500	[thread overview]
Message-ID: <007101c2b4d0$be992520$0100a8c0@win98> (raw)

Hello, I don't know if this has been brought up before but I am going to be
running netfilter under load on a fractional T-3 (12Mbps). The box will have
3 interfaces eth0 going to the Cisco 7200, eth1 (routable IPs) going to the
webfarm for DMZ zone, and then eth2 will be NATed with a private LAN IP
(192.168.1.x). I will be NATing over 200 clients and I know in the past this
could be a problem with IPCHAINS because it would either run out of memory
or start dropping connections. The webservers get about 7,000 hits a day and
they won't be NATed but will be filtered with a mix of statefule and packet
filtering rules. We have a Cisco PIX 525(which is just a Intel P600/512MB
RAM) in place right now but I would like to move to Netfilter as it will be
running on a dual P1ghz and a gig of memory. Is this possible? can Nefilter
scale to this and beyond? and is there any tweaks I should know about?

Thanks in advance.

Mike



             reply	other threads:[~2003-01-05 15:40 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-01-05 15:40 Mike Olivere [this message]
2003-01-06 11:24 ` netfilter under heavy load ITM CS Ruslan O. Nesterov
2003-01-06 23:08   ` Chris Straessle

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to='007101c2b4d0$be992520$0100a8c0@win98' \
    --to=mikeeo@msn.com \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.