Subject: Re: NetBSD/ipfilter limitations
To: Louis Guillaume <firstname.lastname@example.org>
From: Quentin Garnier <email@example.com>
Date: 05/24/2007 19:46:52
Content-Type: text/plain; charset=us-ascii
On Thu, May 24, 2007 at 08:49:34AM -0400, Louis Guillaume wrote:
> I'm considering upgrading my Internet service. Probably to something
> like 20M down 5M up and was wondering:
> Will my Soekris 4501/NetBSD/ipfilter firewall be able to handle the
> traffic and routing?
> At what point will ipfilter begin to choke?
It depends a whole lot on the kind of traffic. For instancem if I have
a couple bittorrents downloads, it gets into that weird state where
everything works except that a non-interactive connection to _some_
ssh servers (cvs.n.o being one of them) gets stuck after several data
packets are exchanged. It recovers without problem once the bt
downloads are ended.
Of course, it's an old IPFilter, the one in 2.0.2, your vintage may
> Are there any other limitations I should be aware of?
Well, the 4501 in itself will be the limitation, but it does the job
well for me.
Quentin Garnier - firstname.lastname@example.org - cube@NetBSD.org
"You could have made it, spitting out benchmarks
Owe it to yourself not to fail"
Amplifico, Spitting Out Benchmarks, Hometakes Vol. 2, 2005.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (NetBSD)
-----END PGP SIGNATURE-----