Linux nat performance

mehboob_urrehman · 08-30-2009, 05:26 PM

Hi,

I tried using my linux box as a router that does MASQUERADE for the internal network,

it works but the performance is really poor, I am able to open a web page or two but then it stops, though I;m still able to ping,

I;ve also tried using SNAT and specified multiple outside ip address and port range of 1024 to 40000 but still the performance doesn't improve!

has anyone else run into a similar problem,, any suggestions ??

currently I'm doing it on ubuntu 9.10 2.6.31-6-generic

iptables v1.4.4

evilted · 08-31-2009, 01:20 AM

what other rules do you have in iptables?
have you performed isolation tests?
what do you base 'performance is really poor' on?

i ask this because i find the nat in linux much better than most routers.. (i have a server handling around 350 clients. after moving its connections from a physical router to linux i gained around 50ms in latency)

mehboob_urrehman · 08-31-2009, 01:46 AM

thanks for the reply,,

Its not a production server so I started with a blank iptables ruleset,

by poor i mean, that I am not able to open three or four web pages at the same time, and pages like facebook don't display correctly..

the internet link however has sufficient bandwidth available and works find without nat,,