From: /dev/rob0 <rob0@gmx.co.uk>
To: netfilter@lists.netfilter.org
Subject: Re: Question about high perfomance Linux firewall
Date: Tue, 6 Sep 2005 11:28:11 -0500 [thread overview]
Message-ID: <200509061128.11300.rob0@gmx.co.uk> (raw)
In-Reply-To: <431C9027.3010104@talika.eii.us.es>
On Monday 2005-September-05 13:36, Javier Miguel Rodríguez wrote:
> My ruleset will be rather short: 500-600 lines, with SNAT/DNAT in
(That doesn't seem short to me.)
> Which gigabit ethernet card is more suitable for high perfomance
> filtering?
I know and trust the Intels, but I can't say how they will compare.
> Any special advice about linux distro/ kernel tuning?
Distro: whatever you are comfortable using. Any can do it.
CPU: 64-bit processors do not have the same memory address space
limitation as do the 32-bit CPU's.
Kernel: if a 32-bit CPU, there are simple patches available which allow
you to specify a LOWMEM / HIGHMEM split other than the default 1G / 3G.
For 1G physical RAM, this is preferable to activating HIGHMEM. I think
mine is set at 1.25G / 2.75G for 1G RAM.
--
mail to this address is discarded unless "/dev/rob0"
or "not-spam" is in Subject: header
next prev parent reply other threads:[~2005-09-06 16:28 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-09-05 18:36 Question about high perfomance Linux firewall Javier Miguel Rodríguez
2005-09-06 9:07 ` Pasi Kärkkäinen
2005-09-06 10:15 ` lst_hoe01
2005-09-06 13:37 ` Michael Bellion
2005-09-06 17:12 ` Javier Miguel Rodríguez
2005-09-06 16:28 ` /dev/rob0 [this message]
-- strict thread matches above, loose matches on Subject: below --
2005-09-06 17:18 Derick Anderson
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200509061128.11300.rob0@gmx.co.uk \
--to=rob0@gmx.co.uk \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox