* Glen Turner:

quoted

Finally time for some more testing with a somewhat upgraded equipment.

Thanks very much for the interesting results.

Indeed.

I'm sure other network engineers have experienced software routers where
the pps has dramatically slowed down upon reasonable ACLs and queuing
(Cisco 7500, etc),

Cisco 7500 with proper configuration would do quite well in this test,
too, even with ACLs.  Only if you have more than a few thousand new
flows per second, things start to look rather bleak.  (Forwarding
decisions are performed once per flow on this platform.)

so some results with netfilter and tc running would be appreciated,
as would tests for any packet re-ordering in output flows.

I'd also like to see tests with random source/destination
combinations, just to keep things in perspective. 8-)