[SOLVED] Global IP Fastforward

[lucifercipher]

Hey mate "franco",

Why is net.inet.ip.fastforwarding disabled by default? Does has got something to do with the 64bit kernel driver offsets or downgrades the performance on amd64? Please clarify as per your tests mate.

Thanks.

[phoenix]

Doesn't it break IPSEC as mentioned here: http://bsdrp.net/documentation/technical_docs/performance

[lucifercipher]

Thank you Pheonix! Let me check the findings from Olivier. Did you encounter IPSec breaking when enabled ? Any findings that you can share with me?

[phoenix]

You're welcome but let me qualify my comments. I'm a novice with FreeBSD so I haven't enable it and tend to leave things as they are for the moment so I can't really tell you if it breaks IPSEC or not. :)

[lucifercipher]

That is fine Bill and I'll remember your name  8) . One can always turn it on and off from the interface or via shell but i was just curious about knowing why it was turned out by default. If a user wishes to use IPSec then he can always disable it be default right? There are upto 95% packet rate forwarding performance improvements with ip fast forwards.

Thanks!

[Tikimotel]

I've always (pfSense) tuned my settings via the System->settings->system tunables interface.
If you don't need IPsec it can give a nice speed increase on lower end hardware. (atoms and via nano CPU's)

[franco]

Been rather busy with my new job but very glad to see you guys helping each other out. Makes me proud. Keep it up. :)