Re: Throughput extremely decreases when IPFW 7000 mac based rules activated

In reply to: Eugene Grosbein : "Re: Throughput extremely decreases when IPFW 7000 mac based rules activated"
Go to: [ bottom of page ] [ top of archives ] [ this month ]

From: Andrey V. Elsukov <bu7cher_at_yandex.ru>
Date: Mon, 16 Aug 2021 13:57:36 UTC

10.08.2021 08:08, Eugene Grosbein пишет:
> Such ruleset could decrease filtering overhead several times but I'm
> afraid that ipfw is not right tool for this task at the moment.
> 
> ipfw has "tables" to optimize large list matching and they perform
> great but for layer3 IP matching, not for layer2 MAC matching.

We have a patch that adds ability to keep MAC addresses in the tables. I
hope we will push it into upstreem soon.

-- 
WBR, Andrey V. Elsukov