Jan Engelhardt <jengelh@xxxxxxxxxx> writes: > I fail to see why Xtables (not just a firewall) should be slower > than the routing table (without routing cache, to make it fair). What about the routing cache, though? Our Linux-based routers handle considerably less than 1Gbps peak, and they drop packets when the cache is flushed. (So I had to set the automatic flush to 86400 seconds instead of 10). It would be necessary to either reinvent the route cache or come up with something better. Preferably the latter, of course. /Benny -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
