OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 15.7 Legacy Series »
  • [SOLVED] Global IP Fastforward
« previous next »
  • Print
Pages: [1]

Author Topic: [SOLVED] Global IP Fastforward  (Read 6097 times)

lucifercipher

  • Jr. Member
  • **
  • Posts: 55
  • Karma: 9
    • View Profile
[SOLVED] Global IP Fastforward
« on: October 18, 2015, 06:54:43 pm »
Hey mate "franco",

Why is net.inet.ip.fastforwarding disabled by default? Does has got something to do with the 64bit kernel driver offsets or downgrades the performance on amd64? Please clarify as per your tests mate.

Thanks.
« Last Edit: February 02, 2018, 11:28:15 am by franco »
Logged

phoenix

  • Hero Member
  • *****
  • Posts: 506
  • Karma: 55
    • View Profile
Re: Global IP Fastforward
« Reply #1 on: October 18, 2015, 06:59:00 pm »
Doesn't it break IPSEC as mentioned here: http://bsdrp.net/documentation/technical_docs/performance
Logged
Regards


Bill

lucifercipher

  • Jr. Member
  • **
  • Posts: 55
  • Karma: 9
    • View Profile
Re: Global IP Fastforward
« Reply #2 on: October 18, 2015, 07:02:40 pm »
Thank you Pheonix! Let me check the findings from Olivier. Did you encounter IPSec breaking when enabled ? Any findings that you can share with me?
Logged

phoenix

  • Hero Member
  • *****
  • Posts: 506
  • Karma: 55
    • View Profile
Re: Global IP Fastforward
« Reply #3 on: October 18, 2015, 07:05:25 pm »
You're welcome but let me qualify my comments. I'm a novice with FreeBSD so I haven't enable it and tend to leave things as they are for the moment so I can't really tell you if it breaks IPSEC or not. :)
Logged
Regards


Bill

lucifercipher

  • Jr. Member
  • **
  • Posts: 55
  • Karma: 9
    • View Profile
Re: Global IP Fastforward
« Reply #4 on: October 18, 2015, 07:08:30 pm »
That is fine Bill and I'll remember your name  8) . One can always turn it on and off from the interface or via shell but i was just curious about knowing why it was turned out by default. If a user wishes to use IPSec then he can always disable it be default right? There are upto 95% packet rate forwarding performance improvements with ip fast forwards.

Thanks!
Logged

Tikimotel

  • Newbie
  • *
  • Posts: 29
  • Karma: 6
    • View Profile
Re: Global IP Fastforward
« Reply #5 on: October 21, 2015, 08:09:46 pm »
I've always (pfSense) tuned my settings via the System->settings->system tunables interface.
If you don't need IPsec it can give a nice speed increase on lower end hardware. (atoms and via nano CPU's)
Logged

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 13695
  • Karma: 1177
    • View Profile
Re: [SOVLED] Global IP Fastforward
« Reply #6 on: October 23, 2015, 08:31:01 am »
Been rather busy with my new job but very glad to see you guys helping each other out. Makes me proud. Keep it up. :)
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • Archive »
  • 15.7 Legacy Series »
  • [SOLVED] Global IP Fastforward
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2