Strange public traceroutes return private RFC1918 addresses

Tue Feb 3 19:34:26 UTC 2004

> Leo Bicknell wrote:
>> because at the higher data rates (eg 40 gige) it makes a huge difference
>> in host usage.  You can fit 6 times in the data in a 9K packet that you
>> can in a 1500 byte packet, which means 1/6th the interrupts, DMA
>> transfers, ACL checks, etc, etc, etc.

* pete at he.iki.fi (Petri Helenius) [Tue 03 Feb 2004, 19:47 CET]:
> This is wrong. Interrupt moderation has been there for quite a while, 
> DMA is chained and predictive.

Just like the extra chopping up of the data you want to send into more
packets, it's things you have to do a few extra times.  That takes time.
There is no way around this.  What Leo wrote is in no way wrong.

> ACL checks I can agree on, but if you are optimizing the system, what
> do you need ACL?s for anyway because you can make the applications
> secure in the first place?

You're trolling, right?

	-- Niels.

-- 
Blessed are the Watchmakers, for they shall inherit the earth.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 155 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20040203/84602538/attachment.sig>