tech-userlevel archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: Lua as a scripting language in NetBSD



On Sun, Oct 18, 2009 at 02:06:25PM -0400, Thor Lancelot Simon wrote:
> Lua is fast enough to do this for many small firewalls, far safer than
> using C code, and far more flexible than the canned types of packet
> matchers and actions offered by ipfilter or pf.  And it interfaces neatly
> with C code such that it's easy to write tiny shims which hook it up to
> our network stack using the existing packet filter hooks.

Actually, with the proper backend code e.g. to implement table matching
in C, it might be as fast as PF/ipfilter, if not faster -- thanks to JIT
support.

Joerg


Home | Main Index | Thread Index | Old Index