Re: [ANNOUNCE] NF-HIPAC: High Performance Packet Classification

[Roberto Nibali <ratz@drugphish.ch>]

> Non-blocking netlink delivery is reliable, although you can overrun the 
> userspace socket buffer (this can be detected, however).  The fundamental 
> issue remains: sending more data to userspace than can be handled.

Agreed.

> A truly reliable transport would also involve an ack based protocol .  
> Under certain circumstances (e.g. log every forwarded packet for audit
> purposes), packets would need to be dropped if the logging mechanism
> became overloaded.  This would in turn involve some kind of queuing
> mechanism and introduce a new set of performance problems.  Reliable
> logging is a challenging problem area in general, probably better suited
> to dedicated hardware environments where the software can be tuned to
> known system capabilities.

Thanks. I think we'll find a solution that will suit us best and if we 
have something we let the community know.

Best regards,
Roberto Nibali, ratz
-- 
echo '[q]sa[ln0=aln256%Pln256/snlbx]sb3135071790101768542287578439snlbxq'|dc