From: /dev/rob0 <rob0@gmx.co.uk>
To: netfilter@lists.netfilter.org
Subject: Re: Question about high perfomance Linux firewall
Date: Tue, 6 Sep 2005 11:28:11 -0500 [thread overview]
Message-ID: <200509061128.11300.rob0@gmx.co.uk> (raw)
In-Reply-To: <431C9027.3010104@talika.eii.us.es>
On Monday 2005-September-05 13:36, Javier Miguel Rodríguez wrote:
> My ruleset will be rather short: 500-600 lines, with SNAT/DNAT in
(That doesn't seem short to me.)
> Which gigabit ethernet card is more suitable for high perfomance
> filtering?
I know and trust the Intels, but I can't say how they will compare.
> Any special advice about linux distro/ kernel tuning?
Distro: whatever you are comfortable using. Any can do it.
CPU: 64-bit processors do not have the same memory address space
limitation as do the 32-bit CPU's.
Kernel: if a 32-bit CPU, there are simple patches available which allow
you to specify a LOWMEM / HIGHMEM split other than the default 1G / 3G.
For 1G physical RAM, this is preferable to activating HIGHMEM. I think
mine is set at 1.25G / 2.75G for 1G RAM.
--
mail to this address is discarded unless "/dev/rob0"
or "not-spam" is in Subject: header
next prev parent reply other threads:[~2005-09-06 16:28 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-09-05 18:36 Question about high perfomance Linux firewall Javier Miguel Rodríguez
2005-09-06 9:07 ` Pasi Kärkkäinen
2005-09-06 10:15 ` lst_hoe01
2005-09-06 13:37 ` Michael Bellion
2005-09-06 17:12 ` Javier Miguel Rodríguez
2005-09-06 16:28 ` /dev/rob0 [this message]
-- strict thread matches above, loose matches on Subject: below --
2005-09-06 17:18 Derick Anderson
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200509061128.11300.rob0@gmx.co.uk \
--to=rob0@gmx.co.uk \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.