Did you know LQ has a Linux Hardware Compatibility List?
Go Back > Blogs > unSpawn
User Name


Rate this Entry

Iptables rule traversal: bandwidth at >= 10K of IP addresses

Posted 11-24-2011 at 09:07 PM by unSpawn
Updated 11-24-2011 at 03:53 PM by unSpawn

Anyone who is interested in iptables performance will find Harris, Melara, Smith and Nico's "Performance analysis of the Linux firewall in a host" (2002) and Kadlecsik and Pásztor's "Netfilter Performance Testing" (2005). But what actually is the effect of a large rule set on performance?

The attached PDF I created is not an an exhaustive study of Netfilter performance but shows you Jperf data and pictures (joy!) for plain rule sets, ipset (iphash) and the iptables recent module.
Attached Images
File Type: pdf Iptables rule traversal.pdf (551.9 KB, 121 views)
Posted in Uncategorized
Views 3666 Comments 0
« Prev     Main     Next »


All times are GMT -5. The time now is 08:39 PM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration