Re: [ANNOUNCE] NF-HIPAC: High Performance Packet Classification

James Morris
2002-09-26T15:08:54Z

On Thu, 26 Sep 2002, Roberto Nibali wrote:

> Yes, we're doing tests in this field now (as with evlog) but as it seems
> from preliminary testing netlink transportation of binary data is not
> 100% reliable either.

Non-blocking netlink delivery is reliable, although you can overrun the
userspace socket buffer (this can be detected, however). The fundamental
issue remains: sending more data to userspace than can be handled.

A truly reliable transport would also involve an ack based protocol .
Under certain circumstances (e.g. log every forwarded packet for audit
purposes), packets would need to be dropped if the logging mechanism
became overloaded. This would in turn involve some kind of queuing
mechanism and introduce a new set of performance problems. Reliable
logging is a challenging problem area in general, probably better suited
to dedicated hardware environments where the software can be tuned to
known system capabilities.

- James
--
James Morris
<jmorris@intercode.com.au>