netdev - Re: [Bugme-new] [Bug 11316] New: severe performance regression for iptables nat routing

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <1218726484.23510.20.camel@2710p.home>
Date:	Thu, 14 Aug 2008 09:08:04 -0600
From:	Alex Williamson <alex.williamson@...com>
To:	Patrick McHardy <kaber@...sh.net>
Cc:	David Miller <davem@...emloft.net>, akpm@...ux-foundation.org,
	buytenh@...vell.com, netdev@...r.kernel.org,
	bugme-daemon@...zilla.kernel.org
Subject: Re: [Bugme-new] [Bug 11316] New: severe performance regression for
	iptables nat routing

On Thu, 2008-08-14 at 13:04 +0200, Patrick McHardy wrote:
> I don't think so, its using skb_make_writable everywhere, which checks
> for skb_clone_writable, which should usually avoid COWing local TCP
> packets. It would also be unlikely to have that much of a performance
> impact (1MB/s -> 34kb/s).
> 
> > 
> > It seems, if anything, using GSO should make things go a little bit
> > faster not slower... Hmmm...
> 
> Alex, could you post a tcpdump from both loopback and the outgoing
> device from the machine you're doing NAT on?

Attached, let me know if you want more options, this is just -vv -n.
The NAT'ing system is at 10.0.2.15 and the ssh tunnel target is
192.168.1.60.  Thanks,

Alex

-- 
Alex Williamson                             HP Open Source & Linux Org.

Download attachment "eth0.log.bz2" of type "application/x-bzip" (34521 bytes)

Download attachment "lo.log.bz2" of type "application/x-bzip" (10538 bytes)