Large scale NAT problems

[Andriy Korud]

ãÉÔÕÀ Attila Nagy <bra at fsn.hu>:

> Andriy Korud wrote:
> > The problem is that when traffic grows to 10Mbit and number of active NAT
> > sessions reach 70000, CPU usage exponentialy grows and system spends all
> CPU
> > time in interrupts handling. 
> > The system become completely unreponsible and unsable and only hard reset
> is the
> > solution.
> Did you try OpenBSD's pf?
> 
Is it ported to 4.9-STABLE?
How can I configure and try it?

Andriy