TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Improving Network Performance with Linux Flowtables

160 点作者 furkansahin大约 1 年前

11 条评论

darksim905大约 1 年前
Showing the netfilter <i>with</i> the OSI layer on the left, after all these years is absolutely clutch and as an educator, I&#x27;m thankful the author made such a thing. It&#x27;s beautiful.<p>I feel like from an abstraction standpoint, a lot of these concepts get lost when you transition to Windows and in either direction, these pre&#x2F;post chains never quite made sense to me on the surface. Though, I&#x27;m positive it&#x27;s because I&#x27;m not a developer or sysadmin in linux daily. I imagine there&#x27;s some fascinating stuff you can do.
评论 #39596812 未加载
评论 #39601346 未加载
rany_大约 1 年前
&gt; In Ubicloud’s case, enabling flowtables just took seven lines of code!<p>Could have been six lines by combining these two lines:<p><pre><code> ip protocol tcp counter flow offload @ubi_flowtable ip protocol udp counter flow offload @ubi_flowtable </code></pre> into:<p><pre><code> meta l4proto { tcp, udp } flow offload @ubi_flowtable </code></pre> Also, their changes only work for IPv4. The above would work for both IPv4 and IPv6.
评论 #39596403 未加载
评论 #39595124 未加载
furkansahin大约 1 年前
Hello from the author, here! I wanted to explain that we use Nftables for NATing, Firewall Rules and some spoofing avoidance tasks at the moment. Enabling Flowtables benefit the full networking stack for any connections. Give it a try!<p>Also, happy to answer if there are any questions.
guerby大约 1 年前
Another article about flowtables:<p><a href="https:&#x2F;&#x2F;firewalld.org&#x2F;2023&#x2F;05&#x2F;nftables-flowtable" rel="nofollow">https:&#x2F;&#x2F;firewalld.org&#x2F;2023&#x2F;05&#x2F;nftables-flowtable</a><p>Documentation:<p><a href="https:&#x2F;&#x2F;wiki.nftables.org&#x2F;wiki-nftables&#x2F;index.php&#x2F;Flowtables" rel="nofollow">https:&#x2F;&#x2F;wiki.nftables.org&#x2F;wiki-nftables&#x2F;index.php&#x2F;Flowtables</a>
dugite-code大约 1 年前
Gave this a shot on my Home server that&#x27;s running a bunch of docker containers. It certainly feels like it&#x27;s improved performance over the network. Next step is to run a bunch of benchmarks.
binkHN大约 1 年前
If more performance is better, why isn&#x27;t this the default in the Linux networking stack? What are the drawbacks of using this and are there security implications?
评论 #39593933 未加载
评论 #39594203 未加载
评论 #39595869 未加载
tux1968大约 1 年前
A little more info:<p><a href="https:&#x2F;&#x2F;www.kernel.org&#x2F;doc&#x2F;Documentation&#x2F;networking&#x2F;nf_flowtable.txt" rel="nofollow">https:&#x2F;&#x2F;www.kernel.org&#x2F;doc&#x2F;Documentation&#x2F;networking&#x2F;nf_flowt...</a>
dboreham大约 1 年前
Nicely written article, and now I know about Ubicloud.
callamdelaney大约 1 年前
Presumably the best way is to skip the kernel all together.. are there any decent ways to run the network stack in userspace yet?<p>-edit- I know userspace networking may not be relevant in the authors case but it is of interest to me.
评论 #39597697 未加载
评论 #39598256 未加载
评论 #39599379 未加载
throwawaaarrgh大约 1 年前
&gt; an opensource alternative to AWS<p>Just putting out there that OpenStack is open source, already exists, very feature complete, and there are even hosting providers that will give you your own OpenStack control plane and only bill you for the resources you use. Only one provider in the US, but several in Europe.<p>No need to deploy and manage your own clusters on bare metal. They do it all for you and just give you an API, same as AWS. Way better than managing your own stack. The fact that more providers aren&#x27;t doing this kind of blows my mind. But they probably prefer the proprietary walled garden, easier to keep customers from moving.
einpoklum大约 1 年前
Should I really read about these tables, or will the Linux kernel replace them with yet another set of tables in a few years, with almost-but-not-quite-the-same semantics, a different command-line tool, different column order etc. ?<p>-- disgruntled user
评论 #39599054 未加载