Re: Performace problems with NAT

[Antony Stone <Antony@Soft-Solutions.co.uk>]

On Friday 25 October 2002 4:38 pm, Berndt Sevcik wrote:

> Thanks for the answer!
>
> We use two Internet Connections. So we need to splitt our Source
> addresses over these. All our official addresses are sent via the slower
> one and all private addresses and proxies are transmitted via the fast
> line (neede NAT).
>
> Another interessting fact ist that ping times are exptremely good. We
> have about 2ms between each Hop in the Chello Nertwork, better than
> ever.
>
> We need source based routing, because we have to default gateways, one
> for each internet connection.

Okay, I understand.

> Here our full configuration:
>
> route add -net ..... (local nets)
> route add default gw 193.170.9.1 (first ISP)
>
> ip rule add from 10.0.0.0/8 table chello1
> ip route add feault via 192.168.158.101 table chello1 (second ISP)
> ip rule add from 193.170.8.133 table chello1
> ip rule add from 193.170.8.134 table chello1
> ip route flush cash

Ah.   A little more than you posted last time :-)   However I still don't see 
a reason for only 20% usage of a 10Mbit connection.

How do you know the problem is not with your ISP ?   Can you download
at 10Mbit under any circumstances ?

What makes you think is it NAT which is causing the performance
problem ? Does the problem go away if you do not use NAT ?

How busy is your box (what load average does uptime show) ?

Are you getting any kernellogging messages about conntrack table full
etc ?

What speed CPU / how much memory is in the netfilter machine ?

Antony.

-- 

All matter in the Universe can be placed into one of two categories:

1. things which need to be fixed
2. things which will need to be fixed once you've had a few minutes to play 
with them