Yes, you're paying for full connection tracking with the compatibility
stuff. If you just want filtering, switch to iptables (should be
pretty easy for you).
> After rmmod ipchains the server seems to have its interactive performace
> back on normal speed, but routing performance still sucks: FTP between
> two hosts on different interfaces gets about 1600 KBytes/s (in 2.2 kernel
> it runs at 9900 KBytes/s). When I disable CONFIG_NET_HW_FLOWCONTROL,
> the throughput increases (ugh!) to 2300 KBytes/s.
Hmmm... this I don't know.
Rusty.
-- Premature optmztion is rt of all evl. --DK - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/