Re: Build firewall with millions pps support

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



How about this Intel NIC
http://www.intel.com/content/dam/doc/product-brief/ethernet-x520-server-adapters-brief.pdf

Does it support Multi Queue?

On Wed, Apr 27, 2016 at 2:13 AM, Luigi Rizzo <rizzo@xxxxxxxxxxxx> wrote:
> you may want to look at github.com/luigirizzo/netmap-ipfw ,
> it is a version of FreeBSD's ipfw+dummynet which runs on top
> of netmap.
>
> This works on both Linux and FreeBSD
>
> Re. cards in my experience the Intel cards (the old X520
> based on the 85299, and the newer X710 based on the new chipset)
> are both decent (I have a slight preference for the older,
> which I find more performant)
>
> cheers
> luigi
>
>
> On Wed, Apr 27, 2016 at 5:20 AM, Satish Patel <satish.txt@xxxxxxxxx> wrote:
>>
>> Planning to build stateless firewall which support 10GE link with
>> handling 2 million packet per second, need following suggestion from
>> folks
>>
>> 1. Which OS i should use?  (BSD or Linux?)
>> 2. what type of 10GE NIC i should pick to achieve high Mpps (multiqueue
>> etc.)
>> 3. what should i use for bypass kernel (I heard from googling people
>> saying use this technique).
>> 4. what kind of server i should pick?
>>
>> We are build this firewall to stop bad traffic at front door and DDoS
>> (specially flooding and UDP IP Fragmentation stype)
>> --
>> To unsubscribe from this list: send the line "unsubscribe netfilter" in
>> the body of a message to majordomo@xxxxxxxxxxxxxxx
>> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>
>
>
>
> --
> -----------------------------------------+-------------------------------
>  Prof. Luigi RIZZO, rizzo@xxxxxxxxxxxx  . Dip. di Ing. dell'Informazione
>  http://www.iet.unipi.it/~luigi/        . Universita` di Pisa
>  TEL      +39-050-2217533               . via Diotisalvi 2
>  Mobile   +39-338-6809875               . 56122 PISA (Italy)
> -----------------------------------------+-------------------------------
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux