Thanks for the insight. I didn't think it should affect the performance. As far as security goes for dynamically loaded modules, are you talking about someone getting at the modules from the local file system? Khanh Tran Network Operations Sarah Lawrence College -----Original Message----- From: Daniel Wittenberg [mailto:daniel-wittenberg@starken.com] Sent: Saturday, February 15, 2003 3:05 PM To: Khanh Tran Subject: Re: module performance Linux kernel modules are not supposed to suffer any performance difference when loaded dynamically or statically. It applies to any module (because of the way they are loaded), so you are good just doing the modules. Using statically built kernel's without module support is better for security, but a PITA to upgrade. Dan On Sat, 2003-02-15 at 07:16, Khanh Tran wrote: > Does anyone feel like giving a somewhat detailed explanation of the > differences in loading the ip_tables modules versus building it into the > kernel? I've got several RedHat Linux firewalls and when it comes to > upgrading the kernels, loading ip_tables as modules is easy. Otherwise, I > have to upgrade my kernel and then go back and re-compile ip_tables into the > kernel. This has proven to be much more time consuming, especially with the > growth of ip_tables use on our network. > > Thoughts? Thanks in advance? > > Khanh Tran > Network Operations > Sarah Lawrence College >
