Re: Iptables Network Performance

Re: Iptables Network Performance

[Jose Maria Lopez Hernandez]

El mié, 23-02-2005 a las 17:24 -0800, Rudi Starcevic escribió:
> Hi,
> 
> Could iptables really reduce network speed by more than 50%.
> 
> It is hard to believe but that seems to be my predicament right now.
> 
> For this test I have a 12 meg file.
> 
> When I download this from my Linux box is get a download speed of 47.23K/s
> 
> When I move this 12 meg file to an internal web server and port-forward
> to it from the Linux box I see a download rate of 11.70K/s
> 
> Does this sound reasonable?

No, it doesn't sound reasonable. I use DNAT and it almost doesn't
affect my download/upload speed on the server. I think you have
another problem.

> If I move my Port-forwarding rule higher up woudld it help?

I don't think so. But it would be better that the rule it's the first
in the nat chain, but it doesn't matter where you put it in
the script. I suppose you knew that.

> Thanks
> Regards
> Rudi      

Regards.

-- 

Jose Maria Lopez Hernandez
Director Tecnico de bgSEC
jkerouac@bgsec.com
bgSEC Seguridad y Consultoria de Sistemas Informaticos
http://www.bgsec.com
ESPAÑA

The only people for me are the mad ones -- the ones who are mad to live,
mad to talk, mad to be saved, desirous of everything at the same time,
the ones who never yawn or say a commonplace thing, but burn, burn, burn
like fabulous yellow Roman candles.
                -- Jack Kerouac, "On the Road"

Iptables Network Performance

[Rudi Starcevic]

Hi,

Could iptables really reduce network speed by more than 50%.

It is hard to believe but that seems to be my predicament right now.

For this test I have a 12 meg file.

When I download this from my Linux box is get a download speed of 47.23K/s

When I move this 12 meg file to an internal web server and port-forward
to it from the Linux box I see a download rate of 11.70K/s

Does this sound reasonable?

If I move my Port-forwarding rule higher up woudld it help?

Thanks
Regards
Rudi      


-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.300 / Virus Database: 266.4.0 - Release Date: 22/02/2005