NAT + NFS

NAT + NFS

[doedelberlin]

i have a Linux gateway performing NAT (SNAT and DNAT) with iptables_1.2.7a

on both sides there are UNIX machines (SOLARIS) 

telnet, ftp, ... works fine but when i mount on Solaris client a directory from 
Solaris nfs server via gateway i have problems with performance.

it starts with "normal speed" but it gets worse and worse.
after reboot of this gateway it is ok but then again the same game.

does anybody have experiences with this problem ?
(best would be also a solution ... ;-)

thank you
______________________________________________________________________________
UNICEF bittet um Spenden fur die Kinder im Irak! Hier online an
UNICEF spenden: https://spenden.web.de/unicef/special/?mc=021101

Re: NAT + NFS

[Joel Newkirk]

On Fri, 2003-04-11 at 08:15, doedelberlin@web.de wrote:
> i have a Linux gateway performing NAT (SNAT and DNAT) with iptables_1.2.7a
> 
> on both sides there are UNIX machines (SOLARIS) 
> 
> telnet, ftp, ... works fine but when i mount on Solaris client a directory from 
> Solaris nfs server via gateway i have problems with performance.
> 
> it starts with "normal speed" but it gets worse and worse.
> after reboot of this gateway it is ok but then again the same game.
> 
> does anybody have experiences with this problem ?
> (best would be also a solution ... ;-)

Is the slowdown just of the NFS traffic, or everything?

j

> thank you
> ______________________________________________________________________________
> UNICEF bittet um Spenden fur die Kinder im Irak! Hier online an
> UNICEF spenden: https://spenden.web.de/unicef/special/?mc=021101
> 
> 

Re: NAT + NFS

[Anders Fugmann]

doedelberlin@web.de wrote:
> i have a Linux gateway performing NAT (SNAT and DNAT) with iptables_1.2.7a
> 
> on both sides there are UNIX machines (SOLARIS) 
> 
> telnet, ftp, ... works fine but when i mount on Solaris client a directory from 
> Solaris nfs server via gateway i have problems with performance.
> 
> it starts with "normal speed" but it gets worse and worse.
> after reboot of this gateway it is ok but then again the same game.
Assuming that the gateway running iptables is the root to the problem,
have you tried to make a minimal working set of rules that exposes the 
problem? If yes then please state them.

Also, what is the load on the gateway when degradation occurs and is the 
degradation still present if you reboot one of the clients?

> 
> does anybody have experiences with this problem ?
No - but I have a few clues :-)

> (best would be also a solution ... ;-)
> 
> thank you

Regards
Anders Fugmann

--
Author of FIAIF
FIAIF is an intelligent firewall
http://www.fiaif.net