* Iptables Network Performance
@ 2005-02-24 1:24 Rudi Starcevic
2005-02-23 11:02 ` Jose Maria Lopez Hernandez
0 siblings, 1 reply; 2+ messages in thread
From: Rudi Starcevic @ 2005-02-24 1:24 UTC (permalink / raw)
To: netfilter
Hi,
Could iptables really reduce network speed by more than 50%.
It is hard to believe but that seems to be my predicament right now.
For this test I have a 12 meg file.
When I download this from my Linux box is get a download speed of 47.23K/s
When I move this 12 meg file to an internal web server and port-forward
to it from the Linux box I see a download rate of 11.70K/s
Does this sound reasonable?
If I move my Port-forwarding rule higher up woudld it help?
Thanks
Regards
Rudi
--
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.300 / Virus Database: 266.4.0 - Release Date: 22/02/2005
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: Iptables Network Performance
2005-02-24 1:24 Iptables Network Performance Rudi Starcevic
@ 2005-02-23 11:02 ` Jose Maria Lopez Hernandez
0 siblings, 0 replies; 2+ messages in thread
From: Jose Maria Lopez Hernandez @ 2005-02-23 11:02 UTC (permalink / raw)
To: netfilter@lists.netfilter.org
El mié, 23-02-2005 a las 17:24 -0800, Rudi Starcevic escribió:
> Hi,
>
> Could iptables really reduce network speed by more than 50%.
>
> It is hard to believe but that seems to be my predicament right now.
>
> For this test I have a 12 meg file.
>
> When I download this from my Linux box is get a download speed of 47.23K/s
>
> When I move this 12 meg file to an internal web server and port-forward
> to it from the Linux box I see a download rate of 11.70K/s
>
> Does this sound reasonable?
No, it doesn't sound reasonable. I use DNAT and it almost doesn't
affect my download/upload speed on the server. I think you have
another problem.
> If I move my Port-forwarding rule higher up woudld it help?
I don't think so. But it would be better that the rule it's the first
in the nat chain, but it doesn't matter where you put it in
the script. I suppose you knew that.
> Thanks
> Regards
> Rudi
Regards.
--
Jose Maria Lopez Hernandez
Director Tecnico de bgSEC
jkerouac@bgsec.com
bgSEC Seguridad y Consultoria de Sistemas Informaticos
http://www.bgsec.com
ESPAÑA
The only people for me are the mad ones -- the ones who are mad to live,
mad to talk, mad to be saved, desirous of everything at the same time,
the ones who never yawn or say a commonplace thing, but burn, burn, burn
like fabulous yellow Roman candles.
-- Jack Kerouac, "On the Road"
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2005-02-24 1:24 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2005-02-24 1:24 Iptables Network Performance Rudi Starcevic
2005-02-23 11:02 ` Jose Maria Lopez Hernandez
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.