Mailinglist Archive: opensuse-security (757 mails)
| < Previous | Next > |
Re: [suse-security] optimal kernel config for firewall gateway ?
- From: Roman Drahtmueller <draht@xxxxxxx>
- Date: Thu, 10 Jan 2002 18:35:09 +0100 (MET)
- Message-id: <Pine.LNX.4.43.0201101802400.15825-100000@xxxxxxxxxxxx>
>
> Ok. If you install a kernel with modul support it doesn't consume memory
> or performance until the module is really used and loaded. That's clear.
> But what about driver or other things compiled directly into the kernel, so
> that the kernel grows ?
> Does this also has no effect on the kernel performance, e.g packet filtering,
> traffic management,... ?
Well, if you compile a kernel with ip-forwarding turned on but filtering
disabled, one would expect that the router is faster because the code is
just missing in the kernel. On a reasonably fast machine I'd say that
these effects should be neglectable.
Is anybody volunteering to test and measure/benchmark the differences?
>
> Bye
> Markus
Roman.
--
- -
| Roman Drahtmüller <draht@xxxxxxx> // "You don't need eyes to see, |
SuSE GmbH - Security Phone: // you need vision!"
| Nürnberg, Germany +49-911-740530 // Maxi Jazz, Faithless |
- -
> Ok. If you install a kernel with modul support it doesn't consume memory
> or performance until the module is really used and loaded. That's clear.
> But what about driver or other things compiled directly into the kernel, so
> that the kernel grows ?
> Does this also has no effect on the kernel performance, e.g packet filtering,
> traffic management,... ?
Well, if you compile a kernel with ip-forwarding turned on but filtering
disabled, one would expect that the router is faster because the code is
just missing in the kernel. On a reasonably fast machine I'd say that
these effects should be neglectable.
Is anybody volunteering to test and measure/benchmark the differences?
>
> Bye
> Markus
Roman.
--
- -
| Roman Drahtmüller <draht@xxxxxxx> // "You don't need eyes to see, |
SuSE GmbH - Security Phone: // you need vision!"
| Nürnberg, Germany +49-911-740530 // Maxi Jazz, Faithless |
- -
| < Previous | Next > |