Hi >If you are doing simple bridging or routing performance is about >the same. I see about 380K packets per second or more depending >on bus speed and network interface card. > >But if you do filtering then your performance can easily get CPU >limited, especially if you are doing connection tracking. The problem >is that filtering ends up reading the whole packet. The case is that I'm not doing any filtering at all, the packet entering the bridge goes up to the IP layer (instead of bridged to another interface) where it is recognized that it has to be routed to another port and after routing it leaves the machine on another port directly. On its way out it shouldn't even enter the bridge attached to the outgoing interface, so the extra processing is done only in the incoming port's bridge compared to simple routing. However, I have been tracing the packet in the kernel so now I more or less know what path the packet 'travels' in the kernel and now I'm going to use oprofile to find out where the bottleneck is and where the packets got dropped. Hopefully can find the answer to the question... Norbert _______________________________________________ Bridge mailing list Bridge@xxxxxxxxxxxxxxxxxxxxxxxxxx https://lists.linux-foundation.org/mailman/listinfo/bridge _______________________________________________ Bridge mailing list Bridge@xxxxxxxxxxxxxxxxxxxxxxxxxx https://lists.linux-foundation.org/mailman/listinfo/bridge