On 2021-08-31 8:48 a.m., Dmitrii Banshchikov wrote:

On Mon, Aug 30, 2021 at 09:56:18PM -0400, Jamal Hadi Salim wrote:

quoted

On 2021-08-29 2:35 p.m., Dmitrii Banshchikov wrote:

quoted

Something is not clear from your email:
You seem to indicate that no traffic was running in test 1.
If so, why would 32 rulesets give different results than 1?

I mentioned the lower and upper bound values for bogo-ops on the
machine. The lower bound is when there is traffic and no firewall
at all. The upper bound is when there is no firewall and no
traffic. Then the first test measures bogo-ops for two rule sets
when there is traffic for either iptables, nft or bpfilter.

Thanks, I totally misread that. I did look at stress-ng initially
to use it to stress the system and emulate some real world
setup (polluting cache etc) while testing but the variability of
the results was bad - so dropped it earlier. Maybe we should look
at it again.

cheers,
jamal