SCIENTIFIC-LINUX-USERS Archives

February 2013

SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Re: Iptables perf degradation and alternatives
From:
Steven Haigh <[log in to unmask]>
Reply To:
Steven Haigh <[log in to unmask]>
Date:
Thu, 28 Feb 2013 01:30:53 +1100
Content-Type:
multipart/signed
Parts/Attachments:
text/plain (751 bytes) , smime.p7s (4 kB) 
On 28/02/2013 1:11 AM, Andrew Z wrote:
> Hello,
> I observed a 6x times perf degradation on ping times with iptables
> (about 30 rules) turned on.
> Just curios if there are alternatives to iptables?
> I found this project, but it has no new releases since 2005.
> http://www.hipac.org/status/news.html
> Here are the details
> http://www.linuxquestions.org/questions/linux-networking-3/iptables-drastic-decrease-in-ping-time-4175451842/

Have you noticed you're actually pinging 3 different hosts?

1) PING yahoo.com (98.138.253.109)
2) PING yahoo.com (98.139.183.24)
3) PING yahoo.com (206.190.36.45)

What makes you think that is iptables based?

-- 
Steven Haigh

Email: [log in to unmask]
Web: http://www.crc.id.au
Phone: (03) 9001 6090 - 0412 935 897
Fax: (03) 8338 0299

ATOM RSS1 RSS2