> One of the things I would do to optimize ipfw is:
> - instead of keeping one list with all the rules, split the list (the
> internal one) by interface and by direction (one list for ed1 incoming,
> one list for ed1 outgoing, etc.).
one skipto rule is enough to switch between two rulesets depending
on direction, so this is not really worthwhile.
I agree that having a `switch' type of rule for selecting interfaces
would be a reasonable gain of efficiency (but then again.. how
many interfaces is one using!)
The problem with current rule format is that you can detect a non-match
very early, but in order to have a real match you have to test all
the fields (addresses, ports, interfaces, ...) and even if this only
means testing flags, it is still some 8-10 tests and 8-10 jumps.
cheers
luigi
-----------------------------------+-------------------------------------
Luigi RIZZO, [EMAIL PROTECTED] . Dip. di Ing. dell'Informazione
http://www.iet.unipi.it/~luigi/ . Universita` di Pisa
TEL/FAX: +39-050-568.533/522 . via Diotisalvi 2, 56126 PISA (Italy)
Mobile +39-347-0373137
-----------------------------------+-------------------------------------
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message
