Subject: Re: ip_fil throughput rates?
To: David Brownlee <abs@mono.org>
From: Herb Peyerl <hpeyerl@beer.org>
List: tech-net
Date: 10/26/1999 10:25:02
David Brownlee <abs@mono.org>  wrote:
 > 	Manuel, would it be possible for you to submit a small
 > 	testamonial on your machine (intended use, basic configuration,
 > 	how happy you are with it, any problems, etc), that we could
 > 	put up on the website?
 > > 
 > > Well, I have a 200Mhz pentium with 5 100Mbs NICS, It seems to supports
 > > the load without troubles (about 500 rules).

Just 'cuz no one asked but I have a similar machine, I thought I'd chime in
with my specifics.

PII/233, 96MB ram, 6 10/100Mbit/sec NICS, plus an OC3 ATM running some 
10mbit PVC's:

The machine was just rebooted due to maintenance but:

 5:37PM  up 1 day,  3:35, 2 users, load averages: 0.14, 0.11, 0.09

[router2 hpeyerl 7 ]; netstat -in | grep Link
ep4   1500  <Link>        00:a0:24:77:f7:75   372560     0   637190     0     0
de0   1500  <Link>        00:c0:95:e0:09:00  5751134     0  6049937     0 112872
de1*  1500  <Link>        00:c0:95:e0:09:01        0     0        0     0     0
de2   1500  <Link>        00:c0:95:e0:09:02  3608965     0  2071485     0  6784
de3   1500  <Link>        00:c0:95:e0:09:03   653553     8  1926103    10 10853
en0   9180  <Link>                            494875     0   458614     0     0
ep2   1500  <Link>        00:60:8c:19:eb:dd  9757031  9049  9404296    20     1

[router2 hpeyerl 9 ]; wc -l /etc/ipf.conf
     263 /etc/ipf.conf

The machine also runs gated and gets a full BGP feed:

[router2 hpeyerl 11 ]; netstat -rn | wc -l
   67874 


Admittedly, the load isn't terribly high on any of the interfaces.


Another machine I have runs somewhat greater load but has less interfaces. It's
a NAT machine for a rather busy webserver:

PII/450 with an obscene amount of ram for the application (384MB):

saabing# ipnat -l | wc -l
    7609 
saabing# w
 9:23AM  up 116 days, 23:33, 1 user, load averages: 0.08, 0.09, 0.08

saabing# netstat -in | grep Link
fxp0  1500  <Link>        00:90:27:2f:3c:b4 366968253     0 269630345     0 12605279
fxp1  1500  <Link>        00:90:27:2f:42:0c 274335323     0 366299814     0 11598504