On Thu, Feb 24, 2005 at 06:29:03AM -0800, Rudi Starcevic wrote: > Hi, > > Still having trouble with port-forwarding performance. > > As much as I look I can't find anything wrong. > > I have one Linux 66.283.12.21 box and one Windows box 192.168.0.10 > > I can download a file of the linux box at around 140K/s > > That very same file on the Windows machine is around 15K/s using DNAT > and Masq/Forwarding. > > I'm very disappointed and did not expect to see anything like this, I > had more like 10% in mind ... > > The linux box is not under heavy load and there is only 431 connections > being tracked. > > Hmm .. I must have a problem else where, it just too hard to believe > those download rate numbers. thoughts: 1 - you have a speed/duplexing mismatch between the internal interface of the firewall and your internal switch...or the windows box and the internal switch (but you should notice that slowing internal transfers)...or both. 2 - your internet connection is ppp/pppoe and you have an MTU problem. since the linux gateway is directly connected, it knows to lower the MTU of the external interface, but machines behind it would continue to assume an MTU of 1500; and in the absence of functioning PMTU discovery, would suffer from significant packet loss due to the need for fragmentation. 3 - you're using some traffic shaping script (like the wondershaper) and it is misconfigured. -j -- "Let us celebrate our agreement with the adding of chocolate to milk." --The Simpsons