RE: Firewall performance

["Ryan Russell" <Ryan.Russell () sybase com>]

> Depends on whether or not it's a proxy firewall or a filter. A
> lot of the vendors that make NT-based firewalls access data just
> above NDIS, then make a go/no-go decision at that point. Doing
> that eliminates NT's IP stack entirely.

Still has to use NT routing code, no?  Just not the socket calls.
This could still be significant, couldn't it?  I've read that the
*BSDs can router IP with 1 memcpy of the packet, while Linux
takes 3.  Not being terribly impressed with NT networking,
I assume something equally bad or worse with NT.

                    Ryan