* Gigabit filtering
@ 2003-03-05 14:08 Axel Thimm
0 siblings, 0 replies; only message in thread
From: Axel Thimm @ 2003-03-05 14:08 UTC (permalink / raw)
To: netfilter
[-- Attachment #1: Type: text/plain, Size: 806 bytes --]
We would like to setup a netfilter based firewall in front of a Gigabit
connection to the main campus backbone. Would someone on this list want to
share his experience?
A duplex Gigabit NIC has nominally a throughput of 250MB/sec. Doing this for
both directions (intern <-> extern) doubles the internal traffic bandwidth to
500MB/sec. Even PCI64/66MHz has a nominal max. throughput of 528 MB/sec, so
this is scratching the limit.
What are the solutions?
o Dual-port NICs with zerocopy for avoiding PCI traffic (I have seen some
expensive ones from Intel). Can those dual-port NICs zerocopy from one port
to the other? Is that supported from linux/netfilter?
o Multiple PCI-busses with one NIC per bus?
Any hardware recommendations? :)
Thanks!
--
Axel.Thimm@physik.fu-berlin.de
[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2003-03-05 14:08 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2003-03-05 14:08 Gigabit filtering Axel Thimm
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).