Home
Help
Search
Login
Register
OPNsense Forum
»
Archive
»
15.7 Legacy Series
»
[SOLVED] Global IP Fastforward
« previous
next »
Print
Pages: [
1
]
Author
Topic: [SOLVED] Global IP Fastforward (Read 9554 times)
lucifercipher
Jr. Member
Posts: 55
Karma: 9
[SOLVED] Global IP Fastforward
«
on:
October 18, 2015, 06:54:43 pm »
Hey mate "franco",
Why is net.inet.ip.fastforwarding disabled by default? Does has got something to do with the 64bit kernel driver offsets or downgrades the performance on amd64? Please clarify as per your tests mate.
Thanks.
«
Last Edit: February 02, 2018, 11:28:15 am by franco
»
Logged
phoenix
Hero Member
Posts: 544
Karma: 58
Re: Global IP Fastforward
«
Reply #1 on:
October 18, 2015, 06:59:00 pm »
Doesn't it break IPSEC as mentioned here:
http://bsdrp.net/documentation/technical_docs/performance
Logged
Regards
Bill
lucifercipher
Jr. Member
Posts: 55
Karma: 9
Re: Global IP Fastforward
«
Reply #2 on:
October 18, 2015, 07:02:40 pm »
Thank you Pheonix! Let me check the findings from Olivier. Did you encounter IPSec breaking when enabled ? Any findings that you can share with me?
Logged
phoenix
Hero Member
Posts: 544
Karma: 58
Re: Global IP Fastforward
«
Reply #3 on:
October 18, 2015, 07:05:25 pm »
You're welcome but let me qualify my comments. I'm a novice with FreeBSD so I haven't enable it and tend to leave things as they are for the moment so I can't really tell you if it breaks IPSEC or not.
Logged
Regards
Bill
lucifercipher
Jr. Member
Posts: 55
Karma: 9
Re: Global IP Fastforward
«
Reply #4 on:
October 18, 2015, 07:08:30 pm »
That is fine Bill and I'll remember your name
. One can always turn it on and off from the interface or via shell but i was just curious about knowing why it was turned out by default. If a user wishes to use IPSec then he can always disable it be default right? There are upto 95% packet rate forwarding performance improvements with ip fast forwards.
Thanks!
Logged
Tikimotel
Newbie
Posts: 29
Karma: 6
Re: Global IP Fastforward
«
Reply #5 on:
October 21, 2015, 08:09:46 pm »
I've always (pfSense) tuned my settings via the System->settings->system tunables interface.
If you don't need IPsec it can give a nice speed increase on lower end hardware. (atoms and via nano CPU's)
Logged
franco
Administrator
Hero Member
Posts: 17210
Karma: 1566
Re: [SOVLED] Global IP Fastforward
«
Reply #6 on:
October 23, 2015, 08:31:01 am »
Been rather busy with my new job but very glad to see you guys helping each other out. Makes me proud. Keep it up.
Logged
Print
Pages: [
1
]
« previous
next »
OPNsense Forum
»
Archive
»
15.7 Legacy Series
»
[SOLVED] Global IP Fastforward