Firewall Profiling.

[Luigi Rizzo]

On Tue, Dec 27, 2011 at 03:18:04PM +0100, Pawel Tyll wrote:
> > plans, yes - not sure how long it will take. I have compiled
> > ipfw+dummynet as a standalone module (outside the kernel)
> > but have not yet hooked the code to netmap to figure out how fast
> > it can run.
> If  I  understand  correctly, this would require netmap to catch every
> packet from interfaces that would be firewalled/routed using ipfw, and
> then  during processing determine if packet is destined for local host
> or  network  and  write it out to host kernel for normal processing or
> quickly  write it out to some destination OS? In other words, userland
> routing  engine using netmap? :)

correct.