Re: status of nf-HIPAC integration ?

[Jeho Park <jhpark-nf@kernelproject.org>]

Patrick McHardy wrote:

>Jeho Park wrote:
>  
>
>>todays, i tested thputs with smartbits (nf-hipac vs iptables) in the
>>kernel 2.6.17.3
>>result URL:
>>http://www.kernelproject.org/people/jhpark/fw_thput_test1.htm
>>
>>the result looks somewhat ugly because thput result is much low.
>>but as you refer my result, you can compare thput of the iptables with
>>that of the nf-hipac in the kernel 2.6.17.3
>>    
>>
>
>That indeed looks ugly (for iptables). How was the ruleset structured?
>Could you put it on your page please?
>
>
>
>
>  
>
i uploaded the scripts.



rule 1000 hipac script:
http://www.kernelproject.org/people/jhpark/fw_forward1000_hp


rule 1000 iptables script:
http://www.kernelproject.org/people/jhpark/fw_forward1000_ipt


rule 2000 hipac script:
http://www.kernelproject.org/people/jhpark/fw_forward2000_hp


rule 2000 iptables script: 
http://www.kernelproject.org/people/jhpark/fw_forward2000_ipt



and above all, i fixed some my mistake. the router was not zeon dual
core but pentium-4 2.4G


so i fixed the result document (
http://www.kernelproject.org/people/jhpark/fw_thput_test1.htm
) 



p.s: 


the commands,  ipt and hp, in the scripts above are somewhat
changed iptables and nf-hipac command.


because i want to access any firewall ruleset with its unique ID for
convience, so i modified netfilter,


hipac kernel code and their user commands (iptables, nf-hipac)




thanks 



--


jeho park <jhpark-nf@kernelproject.org>