On Fri, 2005-09-16 at 17:28 -0700, Simon Kirby wrote:
> I got stuck in some mud again, but I was able to run a small oprofile.
>
> nf_iterate was near the top even though the firewall was empty, so I
> changed CONFIG_IP_NF_IPTABLES=y to CONFIG_IP_NF_IPTABLES=m (and didn't
> load it). Throughput went up from 173 Mbps to 232 Mbps...yikes.
> Conntrack was never compiled. I'll do some more profiling when I get
> a chance...
Yes, it's bloody slow even without any rules loaded at the moment, it's
on my todo list...
If you want even less overhead then don't even select CONFIG_NETFILTER,
that way you avoid compiling in the netfilter hooks completely.
--
/Martin
signature.asc
Description: This is a digitally signed message part
|