Skip to Content.
Sympa Menu

rare-dev - Re: [rare-dev] [RARE-users] new feature is approaching: stateful firewall....

Subject: Rare project developers

List archive

Re: [rare-dev] [RARE-users] new feature is approaching: stateful firewall....


Chronological Thread 
  • From: mc36 <>
  • To: , Frédéric LOUI <>
  • Cc: "" <>
  • Subject: Re: [rare-dev] [RARE-users] new feature is approaching: stateful firewall....
  • Date: Tue, 8 Feb 2022 12:05:59 +0100

hi,

On 2/8/22 11:57, Fr d ric LOUI wrote:
Granted the fact that P4 FW profile can provide enough resources.

we'll see... the mpls oriented profiles can accommodate 150k labels or so...
and that was the secondary target... if we can do the same but with sessions,
then yess..

our sceondary 8000 schools are behind an 4*palo, each supporting max 250k
sessions at once...

but the good news is that the dpdk dataplane is only limited by the available
memory,
and i regularly do test with starting 1-20 torrents with 1000+ seeders
reaching 30k+10k (v4+v6) nat rules,
and thanks to the binary search, and the per flow quickhashing to a forwarder
cores, nothing could be noticed...

regards,
cs



Archive powered by MHonArc 2.6.19.

Top of Page