10GE router resource

Chris Marlatt cmarlatt at rxsec.com
Thu Mar 27 14:12:27 UTC 2008


Patrick Clochesy wrote:
> Very interesting study I had not seen, and a bummer. That really puts a cramp in my advocation of our CARP+pf load balancers/firewalls/gateways. Than again, what's a PIX box capable of? 
> 
> I also had to switch to OpenBSD as there was a fatal crash with the bridge device in FreeBSD when used with my paticular OpenVPN/CARP/pf combination. 
> 
> AFAIK pf/forwarding only takes place on one core and wouldn't take advantage of the other 3 cores, correct? 
> 
> -Patrick 
> 

http://pf4freebsd.love2party.net/pflock/ is worth a quick read. 7.0 
already supports some SMP networking but when the pflock changes are 
done you'll likely see some pretty serious performance from those devices.

Regards,

	Chris



More information about the NANOG mailing list