Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Grant Taylor <gtaylor@riverviewtech.net>
To: Travis Bell <travis@dptexas.net>
Cc: netfilter@lists.netfilter.org
Subject: Re: ARP traffic on a large-ish network
Date: Thu, 17 Mar 2005 02:04:06 -0600	[thread overview]
Message-ID: <423939F6.3070108@riverviewtech.net> (raw)
In-Reply-To: <42B3C34A03A8FC4BB0A80082CE8993F31C1C25@onstopnt.onestop.com>

You *might* try inserting a Linux router in the network between your Cisco and all your clients.  The main things this router would do is run the ARPDaemon which implements a LARGE ARP cache in user space.  Thus hopefully you could configure it to hold most if not all of your client's MAC addresses in it's internal tables thus reducing the need to ARP.  The Linux kernel's internal ARP cache maxs out at around 256 entries.  I don't know if this would work at all as all references to ARP Daemon I've seen are early 2.4 but support for it is still suppose to be in the kernel.  I just looked and it is included in 2.6.11 under "Networking Options".  Let me know if you try this and what you find out as I've got a network with about 2048 potential hosts on it that I'm considering using this on.



Grant. . . .

Travis Bell wrote:
> I wasn't clear on my question yesterday.  Here's what I'm trying to do:
> 
> We've got a /19 block of public IPs from our provider to give to
> customers.
> Because we want customers to have a public IP, as opposed to NATing a
> private IP, they are essentially just plugged into my switch just on the
> other side of the Cisco router from our T1s.
> 
> Our Cisco router is ARP who-has'ing for the entire block of IPs (as it
> should).
> 
> I'd like to stick something between the Cisco router and the customers
> that keeps them from getting so much ARP traffic.  It seems like it's a
> lot of traffic going through.  Ethereal captured 1260 ARP packets in 10
> seconds.
> 
> So is there anything I can do?  Or is that much ARP traffic reasonable?
> 
> Thanks,
> Any advice is appreciated.
> 
> Travis Bell
> 
> 



  parent reply	other threads:[~2005-03-17  8:04 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2005-03-15 16:24 ARP traffic on a large-ish network Travis Bell
2005-03-15 20:00 ` Jason Opperisano
2005-03-17  8:04 ` Grant Taylor [this message]
2005-03-17 15:24   ` Jason Opperisano

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=423939F6.3070108@riverviewtech.net \
    --to=gtaylor@riverviewtech.net \
    --cc=netfilter@lists.netfilter.org \
    --cc=travis@dptexas.net \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox