Re: Build firewall with millions pps support

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, Apr 27, 2016 at 11:02:05AM -0400, Satish Patel wrote:
> How about this Intel NIC
> http://www.intel.com/content/dam/doc/product-brief/ethernet-x520-server-adapters-brief.pdf
> 
> Does it support Multi Queue?

yes, and that's the X520 i mentioned (there are many models based on
the same chipset, i don't know the exact models).

cheers
luigi

> On Wed, Apr 27, 2016 at 2:13 AM, Luigi Rizzo <rizzo@xxxxxxxxxxxx> wrote:
> > you may want to look at github.com/luigirizzo/netmap-ipfw ,
> > it is a version of FreeBSD's ipfw+dummynet which runs on top
> > of netmap.
> >
> > This works on both Linux and FreeBSD
> >
> > Re. cards in my experience the Intel cards (the old X520
> > based on the 85299, and the newer X710 based on the new chipset)
> > are both decent (I have a slight preference for the older,
> > which I find more performant)
> >
> > cheers
> > luigi
> >
> >
> > On Wed, Apr 27, 2016 at 5:20 AM, Satish Patel <satish.txt@xxxxxxxxx> wrote:
> >>
> >> Planning to build stateless firewall which support 10GE link with
> >> handling 2 million packet per second, need following suggestion from
> >> folks
> >>
> >> 1. Which OS i should use?  (BSD or Linux?)
> >> 2. what type of 10GE NIC i should pick to achieve high Mpps (multiqueue
> >> etc.)
> >> 3. what should i use for bypass kernel (I heard from googling people
> >> saying use this technique).
> >> 4. what kind of server i should pick?
> >>
> >> We are build this firewall to stop bad traffic at front door and DDoS
> >> (specially flooding and UDP IP Fragmentation stype)
> >> --
> >> To unsubscribe from this list: send the line "unsubscribe netfilter" in
> >> the body of a message to majordomo@xxxxxxxxxxxxxxx
> >> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> >
> >
> >
> >
> > --
> > -----------------------------------------+-------------------------------
> >  Prof. Luigi RIZZO, rizzo@xxxxxxxxxxxx  . Dip. di Ing. dell'Informazione
> >  http://www.iet.unipi.it/~luigi/        . Universita` di Pisa
> >  TEL      +39-050-2217533               . via Diotisalvi 2
> >  Mobile   +39-338-6809875               . 56122 PISA (Italy)
> > -----------------------------------------+-------------------------------
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux