-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Thursday 17 June 2004 09:59, Morten Nilsen wrote: > > - How will your solution scale? can it handle 200Mb traffic full duplex > on a Xeon 2.8GHz without choking? what about 100Mb on an AMD 800MHz? This is a very good question. I think, the kernel should do guiding the traffic through iptables pretty efficiently and fast. I rather suspect the accounting daemon to be the bottleneck. At the moment, I have my traffic accounter daemon, say: the one logging the traffic, linked against electricfence, which should have very negative effects on performance. I will run a transfer from my server that has a 100Mbit connection later today, and monitor CPU usage. If the electricfence-version does well, you can be sure the productive version will do definitely. My C program is actually written in a way to store produced traffic at first internally, and not use the database functions every time a packet comes in. It should be clear, that the more traffic categories you have though, the more CPU usage is going to be required. I'll keep you updated on my findings :) > - Could it affect latency? I doubt it would have much of an impact on latency, as the accounting is being done in userspace, not on kernel level. > - why not use sudo instead of setuid root? Because I must say to my own embarassement, I haven't used sudo yet. But: you should only have to modify a line in the php script, I think, to make this work using sudo. - -- Thilo Schulz My public PGP key is available at http://home.bawue.de/~arny/public_key.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFA0YXEZx4hBtWQhl4RAnGJAJ4v+lc2XxZTwRDbAynGHXSzqYKTLQCgjiKM 34ytH/wFsTRQUXz5nGf4Qdg= =1ldg -----END PGP SIGNATURE----- _______________________________________________ LARTC mailing list / LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/