Differences

This shows you the differences between two versions of the page.

--- documentation:examples:dropping_packets_at_high_rate [2020/02/07 16:35] – [NIC level configuration] olivier
+++ documentation:examples:dropping_packets_at_high_rate [2020/02/07 16:59] – [Using Chelsio's TCAM firewall] olivier
@@ Line 86: / Line 86: @@
 </code>
-On the 14Mpps of legitimate traffic, this generic (ie: supported by multi drivers) software firewall is still able to forward 12Mpps while droping 42Mpps of denied
+On the 14Mpps of legitimate traffic, this generic (ie: supported by multi drivers) software firewall is still able to forward 12Mpps while droping 42Mpps of denied packets.
 ===== Using Chelsio's TCAM firewall =====
@@ Line 165: / Line 165: @@
 </code>
-To improve the TCAM performance for a filtering usage, all unused "regions" will be disabled to kept only the route and filter.
+To improve the TCAM performance for a filtering usage, all unused "regions" will be disabled to kept only the route and filter (32 entries for route + 2016 for filter = 2048 total).
 For that we need to download a [[https://svnweb.freebsd.org/base/head/sys/dev/cxgbe/firmware/t5fw_cfg_hashfilter.txt?view=co|default TCAM firmware configuration file for our T5 NIC]] to modify its parameters then load the modified configuration into the NIC flash and instruct the NIC to use the file from its flash.