From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Michael Albrecht" Subject: Performance losings with iptables Date: Tue, 13 May 2003 17:40:32 +0200 Sender: netfilter-admin@lists.netfilter.org Message-ID: <007d01c31965$fe099ce0$3a51a8c0@memmingen> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_007A_01C31976.C0A8A920" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.netfilter.org This is a multi-part message in MIME format. ------=_NextPart_000_007A_01C31976.C0A8A920 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hello, i use iptables with Debian-Linux (2.4.20). Wenn i install 150 Input-Chains like this: iptables -A input -s 192.168.81.xxx i will lose a lot of perfomance (for example: apache take a lot of time, = ssh ...) Wenn i show the perfomance with vmstat - vmstat says that 99 % is = idel... Wer is the Problem ??? Thanks for helping ... Michael ------=_NextPart_000_007A_01C31976.C0A8A920 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hello,

i use iptables with Debian-Linux=20 (2.4.20).

Wenn i install 150 Input-Chains like=20 this:

iptables -A input -s = 192.168.81.xxx

i will lose a lot of perfomance (for = example:=20 apache take a lot of time, ssh ...)

Wenn i show the perfomance with vmstat = - vmstat=20 says that 99 % is idel...

Wer is the Problem ???

Thanks for helping ...=20 Michael

------=_NextPart_000_007A_01C31976.C0A8A920--