Gigabit Ethernet Security With Ipfilter

Alex Povolotsky tarkhil at webmail.sub.ru
Tue Jun 24 23:55:43 PDT 2003


On Wed, 18 Jun 2003 16:49:47 +0300
Murat USTUNTAS <ustuntas at bimel.com.tr> wrote:

MU> Local Area ========+-----------------+---------------->
MU> (May be Giga Net)  | Transparent     | 2 Mbit Internet
MU>                    | IpFilter        |
MU>                    +-----------------'
MU>                    |
MU>                    |
MU>                    |_> (Giga Net) Servers
MU> 
MU> And, take the information on NMBCLUSTERS , IPSTATE_SIZE and
MU> IPSTATE_MAX in ip_state.h.
MU> 
MU> Or must I write this mail about ipfilter to ipfilter's mailing list.

I only wonder if two (incoming/outgoing) gigabit flows will leave anything from PCI bus bandwidth. 100 MHz, 32-bit bus can pass 3.2 gigabit per second AT MOST. Too little bus bandwidth can be left for any processing of data.

-- 
Alex.


More information about the freebsd-security mailing list