On Mon, Jan 24, 2005 at 10:42:33AM -0700, Patrick Higgins wrote: > The rules are being applied to eth0 in our simplified test, and it > looks like the interrupts are only being serviced by CPU0. It appears > the iptables rules are also being tested on CPU0. Yes, the whole network stack is traversed on the CPU that has received the innterrupt from the nic. > Could we get better performance by balancing the eth0 interrupts > across CPUs? If not, how about balancing the testing of iptables > rules? You should set irq affinity so that e.g. eth0->cpu0, eth1->cpu1, etc. -- - Harald Welte <laforge@xxxxxxxxxxxxx> http://www.netfilter.org/ ============================================================================ "Fragmentation is like classful addressing -- an interesting early architectural error that shows how much experimentation was going on while IP was being designed." -- Paul Vixie
Attachment:
signature.asc
Description: Digital signature
