From mboxrd@z Thu Jan 1 00:00:00 1970 From: P@draigBrady.com Subject: performance Date: Mon, 09 Jun 2003 17:12:27 +0100 Sender: netfilter-devel-admin@lists.netfilter.org Message-ID: <3EE4B1EB.9090305@draigBrady.com> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-15; format=flowed Content-Transfer-Encoding: quoted-printable Return-path: To: netfilter-devel@lists.netfilter.org Errors-To: netfilter-devel-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Unsubscribe: , List-Archive: List-Id: netfilter-devel.vger.kernel.org Hi, I'm testing netfilter performance here on PIII 1.2GHz based systems. With default kernel configuration, netfilter is able to process 85,000 pps with 125 rules (all rules matching). Note the application is just counting. There is no transmitting/forwarding. Also note the nics are e100. So my simple question are there any tips in increasing the performance? Hmm actually the performance seems optimal? is it only taking 9 instructions per match? 1.2*10^9/(85000*1500) =3D 9 thanks, P=E1draig.