OPNsense Forum

Archive => 15.7 Legacy Series => Topic started by: lucifercipher on October 18, 2015, 06:54:43 pm

Title: [SOLVED] Global IP Fastforward
Post by: lucifercipher on October 18, 2015, 06:54:43 pm: Hey mate "franco",

Why is net.inet.ip.fastforwarding disabled by default? Does has got something to do with the 64bit kernel driver offsets or downgrades the performance on amd64? Please clarify as per your tests mate.

Thanks.
Title: Re: Global IP Fastforward
Post by: phoenix on October 18, 2015, 06:59:00 pm: Doesn't it break IPSEC as mentioned here: http://bsdrp.net/documentation/technical_docs/performance
Title: Re: Global IP Fastforward
Post by: lucifercipher on October 18, 2015, 07:02:40 pm: Thank you Pheonix! Let me check the findings from Olivier. Did you encounter IPSec breaking when enabled ? Any findings that you can share with me?
Title: Re: Global IP Fastforward
Post by: phoenix on October 18, 2015, 07:05:25 pm: You're welcome but let me qualify my comments. I'm a novice with FreeBSD so I haven't enable it and tend to leave things as they are for the moment so I can't really tell you if it breaks IPSEC or not. :)
Title: Re: Global IP Fastforward
Post by: lucifercipher on October 18, 2015, 07:08:30 pm: That is fine Bill and I'll remember your name 8) . One can always turn it on and off from the interface or via shell but i was just curious about knowing why it was turned out by default. If a user wishes to use IPSec then he can always disable it be default right? There are upto 95% packet rate forwarding performance improvements with ip fast forwards.

Thanks!
Title: Re: Global IP Fastforward
Post by: Tikimotel on October 21, 2015, 08:09:46 pm: I've always (pfSense) tuned my settings via the System->settings->system tunables interface.
If you don't need IPsec it can give a nice speed increase on lower end hardware. (atoms and via nano CPU's)
Title: Re: [SOVLED] Global IP Fastforward
Post by: franco on October 23, 2015, 08:31:01 am: Been rather busy with my new job but very glad to see you guys helping each other out. Makes me proud. Keep it up. :)