Re: u32 match versus iptables CLASSIFY target - performance

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Jan 30, 2006 at 02:15:02PM +0200, Cristian Carstea wrote:
> hello,
> 
> i have a question:
> - which one is faster: "tc filter with u32 match per dst ip" or "iptables
> match per dst ip with target CLASSIFY"?
> - this question is for large rulesets (over 500)

use hashes if it's possible to hash those "ip dst".

> 
> thank you,
> cristian carstea

-- 
  _,-=._              /|_/|
  `-.}   `=._,.-=-._.,  @ @._,
     `._ _,-.   )      _,.-'
        `    G.m-"^m`m'        Dmytro O. Redchuk


_______________________________________________
LARTC mailing list
LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux