Re: [ANNOUNCE] NF-HIPAC: High Performance Packet Classification

Roberto Nibali (ratz@drugphish.ch)
Thu, 26 Sep 2002 22:51:09 +0200


> Non-blocking netlink delivery is reliable, although you can overrun the
> userspace socket buffer (this can be detected, however). The fundamental
> issue remains: sending more data to userspace than can be handled.

Agreed.

> A truly reliable transport would also involve an ack based protocol .
> Under certain circumstances (e.g. log every forwarded packet for audit
> purposes), packets would need to be dropped if the logging mechanism
> became overloaded. This would in turn involve some kind of queuing
> mechanism and introduce a new set of performance problems. Reliable
> logging is a challenging problem area in general, probably better suited
> to dedicated hardware environments where the software can be tuned to
> known system capabilities.

Thanks. I think we'll find a solution that will suit us best and if we
have something we let the community know.

Best regards,
Roberto Nibali, ratz

-- 
echo '[q]sa[ln0=aln256%Pln256/snlbx]sb3135071790101768542287578439snlbxq'|dc

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/