vsc blog » pf http://blog.manov.su Личные заметки и всякие полезности Tue, 31 Jan 2012 06:48:14 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 блокировка трафика по geoip http://blog.manov.su/2010/11/27/%d0%b1%d0%bb%d0%be%d0%ba%d0%b8%d1%80%d0%be%d0%b2%d0%ba%d0%b0-%d1%82%d1%80%d0%b0%d1%84%d0%b8%d0%ba%d0%b0-%d0%bf%d0%be-geoip/ http://blog.manov.su/2010/11/27/%d0%b1%d0%bb%d0%be%d0%ba%d0%b8%d1%80%d0%be%d0%b2%d0%ba%d0%b0-%d1%82%d1%80%d0%b0%d1%84%d0%b8%d0%ba%d0%b0-%d0%bf%d0%be-geoip/#comments Fri, 26 Nov 2010 21:25:44 +0000 vovan http://blog.manov.su/?p=450 http://www.ipdeny.com/ipblocks/]]>

http://www.ipdeny.com/ipblocks/

]]> http://blog.manov.su/2010/11/27/%d0%b1%d0%bb%d0%be%d0%ba%d0%b8%d1%80%d0%be%d0%b2%d0%ba%d0%b0-%d1%82%d1%80%d0%b0%d1%84%d0%b8%d0%ba%d0%b0-%d0%bf%d0%be-geoip/feed/ 0 Порядок обработки пакетов ядром FreeBSD http://blog.manov.su/2010/01/27/%d0%bf%d0%be%d1%80%d1%8f%d0%b4%d0%be%d0%ba-%d0%be%d0%b1%d1%80%d0%b0%d0%b1%d0%be%d1%82%d0%ba%d0%b8-%d0%bf%d0%b0%d0%ba%d0%b5%d1%82%d0%be%d0%b2-%d1%8f%d0%b4%d1%80%d0%be%d0%bc-freebsd/ http://blog.manov.su/2010/01/27/%d0%bf%d0%be%d1%80%d1%8f%d0%b4%d0%be%d0%ba-%d0%be%d0%b1%d1%80%d0%b0%d0%b1%d0%be%d1%82%d0%ba%d0%b8-%d0%bf%d0%b0%d0%ba%d0%b5%d1%82%d0%be%d0%b2-%d1%8f%d0%b4%d1%80%d0%be%d0%bc-freebsd/#comments Wed, 27 Jan 2010 06:49:19 +0000 vovan http://blog.manov.su/?p=316 pf, ipfw и ipfilter вкомпилены в ядро ipfw -> pf -> ipfilter -> stack - для входящего stack -> ipfilter -> pf -> ipfw - для исходящего pf загружен как модуль ядра pf -> ipfw -> ipfilter -> stack - …

Читать далее »

]]>

pf, ipfw и ipfilter вкомпилены в ядро

ipfw -> pf -> ipfilter -> stack	 - для входящего
stack -> ipfilter -> pf -> ipfw  - для исходящего

pf загружен как модуль ядра

pf -> ipfw -> ipfilter -> stack - для входящего
stack -> ipfilter -> ipfw -> pf - для исходящего

(с) http://paix.org.ua/freebsd/fwpackets.html

порядок обработки пакетов pf’ом

оригинал http://homepage.mac.com/quension/pf/flow.png

]]> http://blog.manov.su/2010/01/27/%d0%bf%d0%be%d1%80%d1%8f%d0%b4%d0%be%d0%ba-%d0%be%d0%b1%d1%80%d0%b0%d0%b1%d0%be%d1%82%d0%ba%d0%b8-%d0%bf%d0%b0%d0%ba%d0%b5%d1%82%d0%be%d0%b2-%d1%8f%d0%b4%d1%80%d0%be%d0%bc-freebsd/feed/ 0 pf openbsd perfomance http://blog.manov.su/2009/10/19/pf-openbsd-perfomance/ http://blog.manov.su/2009/10/19/pf-openbsd-perfomance/#comments Mon, 19 Oct 2009 08:57:09 +0000 vovan http://blog.manov.su/?p=198 PF will only use one processor, so multiple processors (or multiple cores) WILL NOT improve PF performance. HOWEVER, under some circumstances, running the SMP version of OpenBSD (bsd.mp) instead of bsd will give better performance due to differences in how …

Читать далее »

]]>

PF will only use one processor, so multiple processors (or multiple cores) WILL NOT improve PF performance. HOWEVER, under some circumstances, running the SMP version of OpenBSD (bsd.mp) instead of bsd will give better performance due to differences in how interrupt handling is done. In many cases, bsd.mp will give less performance. IF you are seeing performance problems, experiment with this, most users will never hit any limits to worry about it.

http://www.openbsd.org/faq/pf/perf.html

=(

]]> http://blog.manov.su/2009/10/19/pf-openbsd-perfomance/feed/ 0