Received: with ECARTIS (v1.0.0; list netdev); Tue, 04 Jan 2005 06:55:43 -0800 (PST) Received: from mx02.cybersurf.com (mx02.cybersurf.com [209.197.145.105]) by oss.sgi.com (8.13.0/8.13.0) with ESMTP id j04EtFcD003593 for ; Tue, 4 Jan 2005 06:55:36 -0800 Received: from mail.cyberus.ca ([209.197.145.21]) by mx02.cybersurf.com with esmtp (Exim 4.30) id 1Cm1KF-000358-QG for netdev@oss.sgi.com; Tue, 04 Jan 2005 21:55:07 -0500 Received: from cpe0030ab124d2f-cm014500000962.cpe.net.cable.rogers.com ([24.103.99.32] helo=[10.0.0.9]) by mail.cyberus.ca with esmtp (Exim 4.20) id 1Cm1K7-0003Tm-Sr; Tue, 04 Jan 2005 21:55:00 -0500 Subject: Re: [RFC] ematch API, u32 ematch, nbyte ematch, basic classifier From: jamal Reply-To: hadi@cyberus.ca To: Thomas Graf Cc: netdev@oss.sgi.com In-Reply-To: <20050104134126.GJ26856@postel.suug.ch> References: <20050103125635.GB26856@postel.suug.ch> <1104812028.1085.50.camel@jzny.localdomain> <20050104122738.GG26856@postel.suug.ch> <1104844935.1085.103.camel@jzny.localdomain> <20050104134126.GJ26856@postel.suug.ch> Content-Type: text/plain Organization: jamalopolous Message-Id: <1104893694.1124.37.camel@jzny.localdomain> Mime-Version: 1.0 X-Mailer: Ximian Evolution 1.2.2 Date: 04 Jan 2005 21:54:54 -0500 Content-Transfer-Encoding: 7bit X-Virus-Scanned: ClamAV 0.80/650/Sun Jan 2 19:00:02 2005 clamav-milter version 0.80j on 127.0.0.1 X-Virus-Status: Clean X-archive-position: 13389 X-ecartis-version: Ecartis v1.0.0 Sender: netdev-bounce@oss.sgi.com Errors-to: netdev-bounce@oss.sgi.com X-original-sender: hadi@cyberus.ca Precedence: bulk X-list: netdev On Tue, 2005-01-04 at 08:41, Thomas Graf wrote: > * jamal <1104844935.1085.103.camel@jzny.localdomain> 2005-01-04 08:22 > > On Tue, 2005-01-04 at 07:27, Thomas Graf wrote: > > I am pretty sure someone who knows u32 well can outperform you (in the > > scenarios where u32 works using AND etc). > > Start hitting 50K rules then lets talk ;-> > > Sure but I'd call a filter with 50K ANDed rules an unlikely scenario ;-> 50K matches is probably senseless - i was talking about rules (which contain matches). > In most cases logic will beat brute force. I used to have a u32 setup > with 4K matches and hashing, it was not only error prone but could be > replaced with 12 egp filters gaining 90kpps. Why's that? Simply because > it was easier to optimize the logic behind it. egp itself is terribly > slow compared to u32. I think this is a debate that can be easily settled ;-> Agreed logic will beat brute force smartness and u32 is not exactly for the faint hearted. And its usability is extremely poor - but lets maintain its power as is. > > If your intent is to write an ematch holder, then it would be worth to > > at least go as far as making it some basic hash - as basic as fw does; > > where collision leads toa linked list. If it is just to show an example, > > then it is fine. > > Using what key? We have no knowledge about what the ematches want to > see or not. Ok, good question ;-> Maybe you should have own some 32 bit key? cheers, jamal