Re: 10GE router resource

[Chris Marlatt <cmarlatt () rxsec com>]

Patrick Clochesy wrote:
> Very interesting study I had not seen, and a bummer. That really puts a cramp in my advocation of our CARP+pf load balancers/firewalls/gateways. Than again, what's a PIX box capable of? 
>
> I also had to switch to OpenBSD as there was a fatal crash with the bridge device in FreeBSD when used with my paticular OpenVPN/CARP/pf combination. 
>
> AFAIK pf/forwarding only takes place on one core and wouldn't take advantage of the other 3 cores, correct? 
>
> -Patrick 

http://pf4freebsd.love2party.net/pflock/ is worth a quick read. 7.0 
already supports some SMP networking but when the pflock changes are 
done you'll likely see some pretty serious performance from those devices.

Regards,

        Chris