* Performance impact with multiple pcap handlers on Linux
@ 2020-12-22 22:05 Linus Lüssing
0 siblings, 0 replies; only message in thread
From: Linus Lüssing @ 2020-12-22 22:05 UTC (permalink / raw)
To: tcpdump-workers, bpf
Hi,
I was experimenting a bit with migrating from the use of
pcap_offline_filter() to pcap_setfilter().
I was a bit surprised that installing for instance 500 pcap
handlers with a BPF rule "arp" via pcap_setfilter() reduced
the TCP performance of iperf3 over veth interfaces from 73.8 Gbits/sec
to 5.39 Gbits/sec. Using only one or even five handlers seemed
fine (71.7 Gbits/sec and 70.3 Gbits/sec).
Is that expected?
Full test setup description and more detailed results can be found
here: https://github.com/lemoer/bpfcountd/pull/8
Regards, Linus
PS: And I was also surprised that there seems to be a limit of
only 510 pcap handlers on Linux.
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2020-12-22 22:12 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2020-12-22 22:05 Performance impact with multiple pcap handlers on Linux Linus Lüssing
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox