From: "Покотиленко Костик" <casper@meteor.dp.ua>
To: "Július Bemš" <julo@atknet.sk>
Cc: netfilter@lists.netfilter.org
Subject: Re: NAT performance + table processing
Date: Thu, 09 Aug 2007 21:26:46 +0300 [thread overview]
Message-ID: <1186684006.4613.7.camel@localhost.localdomain> (raw)
In-Reply-To: <000b01c7daac$f4b57030$de205090$@sk>
В Чтв, 09/08/2007 в 19:44 +0200, Július Bemš пишет:
> Hi,
>
> I wrote some performance tests of NAT table. The main idea is, that I add
> 10000 random+senseless rules to the NAT table (snat, postrouting) and then I
> add some rule to specific position which will stop traversing of NAT table.
> I use UDP packets.
>
> When I insert my reasonable rule to position 2000 and run my test, it shows
> delay of packets cca 300ms. But when I run it more times, this delay is 2ms.
> I don't understand why, because I use UDP(connectionless) - so I think, that
> netfilter must process each packet and find appropriate rule. Is this true?
> Or does netfilter do some optimalization? Because this behavior is expected
> in TCP, but not UDP.
UDP is connectionless, you are right. But conntrack thinks of it like of
connection-oriented. If several UDP packets have the same source IPs and
ports and same destination IPs and ports conntrack thinks those are
belonging to the same "connection".
--
Покотиленко Костик <casper@meteor.dp.ua>
prev parent reply other threads:[~2007-08-09 18:26 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2007-08-09 17:44 NAT performance + table processing Július Bemš
2007-08-09 18:26 ` Покотиленко Костик [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1186684006.4613.7.camel@localhost.localdomain \
--to=casper@meteor.dp.ua \
--cc=julo@atknet.sk \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox