Re: Avoiding natd overhead

At 09:50 PM 10/21/2006, Julian Elischer wrote:

one thing that you need to name sure of is that only the packets that have potential of being on interest to natd are passed to natd.

I do. In fact, this is a capability I would lose if I used ipfilters or pf to do NAT, which is why I want to find a way to use a mechanism that's triggered by IPFW.

You were the person who invented "divert sockets," were you not? How hard would it be to create a mechanism (a sort of "kernel divert socket") so that kernel modules and/or netgraph nodes could do the same things which are now done by userland processes listening on divert sockets? This would boost the performance of any FreeBSD machine that did NAT (which many if not most do).

--Brett Glass


_______________________________________________
freebsd-net@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: Avoiding natd overhead
    ... have potential of being on interest to natd are passed to natd. ... How hard would it be to create a mechanism (a sort of "kernel divert socket") so that kernel modules and/or netgraph nodes could do the same things which are now done by userland processes listening on divert sockets? ...
    (freebsd-net)
  • Re: natd question
    ... > dont forget to set the gateway IP address of your network clients to ... > the IP address of your FreeBSD nat server. ... > have enabled natd on the machine, but still cannot get packets out ... > To unsubscribe, send any mail to ...
    (freebsd-questions)
  • RE: Difficulties establishing VPN tunnel with IPNAT
    ... Perhaps, but I'v heard a lot of good things about IPF and IPNAT, ... especially since the nat is all in kernel where as natd is userland, ... natd is always criticized because going to userland is slow. ... ipfw add divert natd ip from any to in recv [outside ...
    (freebsd-questions)
  • RE: Question abt NATD
    ... natd does not use the kernel for NAT - it is a user land process and uses ... Subject: Question abt NATD ... It is extreemly necessary to be able to view the NAT ... with "unsubscribe freebsd-security" in the body of the message ...
    (FreeBSD-Security)
  • RE: FreeBSD NATd problems
    ... We have experienced the same effects with 1600 cisco routers servicing NAT. ... some internal hosts were infected with the codered worm ... However in the last 10 days I have had a number of these natd ...
    (Incidents)