Re: Time to let go of ipfilter

看板DFBSD_kernel作者時間15年前 (2011/01/21 21:01), 編輯推噓0(000)
留言0則, 0人參與, 最新討論串2/23 (看更多)
2011/1/21 Sepherosa Ziehau <sepherosa@gmail.com>: > Hi all, Hi sephe > > ipfilter is not maintained in dragonfly at all, I plan to remove it. Just a word about it. Currently we (a french hoster http://www.nfrance.com) use DragonFly (2.6 has 2.8 broke ipsec) as primary OS for our routers (20 machines) with quagga and ipf. And its work really well (better than FreeBSD we were previously using). Our requirement for routing machines is to be able to gracefuly handle 200-300mb/s traffic load with filtering (stateless) and bgp/ospf routing (full table). Crash test is at 400mb/s in lab. We choose ipf for historical reasons (previously used on FreeBSD). But we experienced on FreeBSD that it's really faster than pf. Do you think there is currently an other software (maybe ipfw) that can filter 200/300 mb/s load ? > > Best Regards, > sephe > > -- > Tomorrow Will Never Die >
文章代碼(AID): #1DEOEWhJ (DFBSD_kernel)
討論串 (同標題文章)
文章代碼(AID): #1DEOEWhJ (DFBSD_kernel)