We use a RedHat 7.3 machine as bridge on a P3 1.8 Ghz with 2 64 bits
Gigabit interfaces. On the machine we have a lot of iptables rules like :
all -- 213.134.x.0 0.0.0.0/0
all -- 0.0.0.0/0 213.134.x.0
TOS all -- 213.134.x.4 0.0.0.0/0 TOS set 0x08
all -- 0.0.0.0/0 213.134.x.4
We have about 3200 iptables rules on our bridge. I've tested today to
remove 1000 of these rules. The load dropped from about 40% to 25%. So I
think the iptables rule take up the most of the CPU load. Do you think this
is a problem of ineffeciency of iptables or just a 'limitation' in the
TCP/IP stack of linux ?
regards Rinse
