nanog mailing list archives
RE: cpu needed to NAT 45mbs
From: "David Schwartz" <davids () webmaster com>
Date: Thu, 8 Nov 2007 14:52:20 -0800
From my experience, a fast P4 linux box with 2 good NICs can NAT 45Mbps easily. I am NAT/PATing >4,000 desktops with extensive access control lists and no speed issues. This isn't over a 45Mb T3--this is over 100 Mb Ethernet. --Patrick Darden --ARMC, Internetworking Manager
A second CPU or core will help tremendously. We used to use single-CPU boxes for this and we noticed that traffic sometimes stalls when the machine has to do some task other than NATting, such as expiring idle flows. Having a second CPU or core will help keep latency much more uniform. We have a few dual 3.2Ghz Xeon boxes (not the ones based on Core, the older ones) that NAT/FW across two GE interfaces. They do quite well up to about 300Mb/s, then we start to see issues. We believe the issues are due to overloading the NB-SB link. A more modern mobo probably wouldn't have this problem. DS
Current thread:
- cpu needed to NAT 45mbs Carl Karsten (Nov 08)
- RE: cpu needed to NAT 45mbs Darden, Patrick S. (Nov 08)
- Re: cpu needed to NAT 45mbs Jeff Kell (Nov 08)
- RE: cpu needed to NAT 45mbs David Schwartz (Nov 08)
- Re: cpu needed to NAT 45mbs Deepak Jain (Nov 08)
- Re: cpu needed to NAT 45mbs Joe Greco (Nov 08)
- Re: cpu needed to NAT 45mbs Christopher Morrow (Nov 08)
- Re: cpu needed to NAT 45mbs Lamar Owen (Nov 09)
- Re: cpu needed to NAT 45mbs Suresh Ramasubramanian (Nov 09)
- Re: cpu needed to NAT 45mbs Adrian Chadd (Nov 09)
- Re: cpu needed to NAT 45mbs Joel Jaeggli (Nov 10)
- RE: cpu needed to NAT 45mbs Frank Bulk (Nov 12)
- Re: cpu needed to NAT 45mbs Randy Bush (Nov 12)
- Re: cpu needed to NAT 45mbs Joel Jaeggli (Nov 12)
- Re: cpu needed to NAT 45mbs Suresh Ramasubramanian (Nov 09)
- RE: cpu needed to NAT 45mbs Darden, Patrick S. (Nov 08)