In message <[EMAIL PROTECTED]>, Luigi Rizzo writes:
>> One of the things I would do to optimize ipfw is:
>> - instead of keeping one list with all the rules, split the list (the
>> internal one) by interface and by direction (one list for ed1 incoming,
>> one list for ed1 outgoing, etc.).
>
>one skipto rule is enough to switch between two rulesets depending
>on direction, so this is not really worthwhile.
>I agree that having a `switch' type of rule for selecting interfaces
>would be a reasonable gain of efficiency (but then again.. how
>many interfaces is one using!)
I still think we should split the current "one huge list of rules"
into several lists:
Two lists per interface:
one list of rules for inbound packets
one list of rules for outbound packets
Two lists for the IP stack:
one list of rules for incoming packets
one list of rules for outgoing packets
One list for forwarding of packets.
in theory one could also:
Two lists for the UDP stack:
one list of rules for incoming packets
one list of rules for outgoing packets
Two lists for the TCP stack:
one list of rules for incoming packets
one list of rules for outgoing packets
--
Poul-Henning Kamp FreeBSD coreteam member
[EMAIL PROTECTED] "Real hackers run -current on their laptop."
FreeBSD -- It will take a long time before progress goes too far!
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message
