Differences

This shows you the differences between two versions of the page.

--- documentation:examples:dropping_packets_at_high_rate [2020/02/07 16:36] – [Performance impact] olivier
+++ documentation:examples:dropping_packets_at_high_rate [2020/02/07 17:44] – [Performance impact] olivier
@@ Line 12: / Line 12: @@
   - First rule is to deny a blacklist table (IP addresses)
   - Second rule is to allow all the rest
-  - Disable the outgoing [[https://www.freebsd.org/cgi/man.cgi?query=pfil&apropos=0&sektion=0&manpath=FreeBSD+12.1-RELEASE+and+Ports&arch=default&format=html|pfil(9)]] hook at IP level because we don't need to filter outgoing traffic
+  - Disable the outgoing [[https://www.freebsd.org/cgi/man.cgi?query=pfil&apropos=0&sektion=0&manpath=FreeBSD+12.1-RELEASE+and+Ports&arch=default&format=html|pfil(9)]] hook at IP level because we don't need to filter outgoing traffic in this case
 <code>
@@ Line 56: / Line 56: @@
 </code>
-==== Performance impact ====
+==== Performance benches ====
 Hardware:
@@ Line 165: / Line 165: @@
 </code>
-To improve the TCAM performance for a filtering usage, all unused "regions" will be disabled to kept only the route and filter.
+To improve the TCAM performance for a filtering usage, all unused "regions" will be disabled to kept only the route and filter (32 entries for route + 2016 for filter = 2048 total).
 For that we need to download a [[https://svnweb.freebsd.org/base/head/sys/dev/cxgbe/firmware/t5fw_cfg_hashfilter.txt?view=co|default TCAM firmware configuration file for our T5 NIC]] to modify its parameters then load the modified configuration into the NIC flash and instruct the NIC to use the file from its flash.