EMPTY RULESET
nft flush ruleset
GENERATOR 611.304225 main_thread [2655] 14.192 Mpps (14.221 Mpkts 6.826 Gbps in 1001998 usec) 421.83 avg_batch 99999 min_space 612.306227 main_thread [2655] 14.204 Mpps (14.232 Mpkts 6.831 Gbps in 1002002 usec) 421.70 avg_batch 99999 min_space 613.308225 main_thread [2655] 14.199 Mpps (14.227 Mpkts 6.829 Gbps in 1001998 usec) 422.08 avg_batch 99999 min_space 614.309226 main_thread [2655] 14.158 Mpps (14.172 Mpkts 6.803 Gbps in 1001000 usec) 421.88 avg_batch 99999 min_space 615.311226 main_thread [2655] 14.216 Mpps (14.245 Mpkts 6.838 Gbps in 1002000 usec) 421.90 avg_batch 99999 min_space RECEIVER 610.403228 main_thread [2655] 6.525 Mpps (6.538 Mpkts 3.138 Gbps in 1002003 usec) 3.16 avg_batch 2038 min_space 611.404226 main_thread [2655] 6.527 Mpps (6.533 Mpkts 3.136 Gbps in 1000998 usec) 3.20 avg_batch 2038 min_space 612.405226 main_thread [2655] 6.528 Mpps (6.534 Mpkts 3.137 Gbps in 1001000 usec) 3.13 avg_batch 2039 min_space 613.406226 main_thread [2655] 6.526 Mpps (6.532 Mpkts 3.135 Gbps in 1001000 usec) 3.15 avg_batch 2038 min_space 614.407482 main_thread [2655] 6.525 Mpps (6.533 Mpkts 3.136 Gbps in 1001256 usec) 3.20 avg_batch 2039 min_space 615.409225 main_thread [2655] 6.527 Mpps (6.538 Mpkts 3.138 Gbps in 1001742 usec) 3.17 avg_batch 2036 min_space
EMPTY RULESET XXX rules = 0 but connection tracking
flush ruleset
table ip lume_filter {
chain forward {
type filter hook forward priority -10; policy drop;
ct state established counter
ip saddr 198.18.10.0/24 ip daddr 198.19.10.0/24 counter accept
}
}
GENERATOR 890.375209 main_thread [2655] 14.179 Mpps (14.207 Mpkts 6.819 Gbps in 1002002 usec) 421.08 avg_batch 99999 min_space 891.377206 main_thread [2655] 14.240 Mpps (14.268 Mpkts 6.849 Gbps in 1001997 usec) 421.06 avg_batch 99999 min_space 892.379207 main_thread [2655] 14.205 Mpps (14.233 Mpkts 6.832 Gbps in 1002001 usec) 421.26 avg_batch 99999 min_space 893.381207 main_thread [2655] 14.159 Mpps (14.188 Mpkts 6.810 Gbps in 1002000 usec) 421.12 avg_batch 99999 min_space 894.382206 main_thread [2655] 14.159 Mpps (14.173 Mpkts 6.803 Gbps in 1000999 usec) 421.49 avg_batch 99999 min_space RECEIVER 890.495210 main_thread [2655] 6.029 Mpps (6.041 Mpkts 2.900 Gbps in 1002003 usec) 2.90 avg_batch 2039 min_space 891.497207 main_thread [2655] 6.029 Mpps (6.041 Mpkts 2.900 Gbps in 1001997 usec) 2.91 avg_batch 2038 min_space 892.499207 main_thread [2655] 6.029 Mpps (6.042 Mpkts 2.900 Gbps in 1002000 usec) 2.94 avg_batch 2038 min_space 893.501208 main_thread [2655] 6.031 Mpps (6.043 Mpkts 2.901 Gbps in 1001999 usec) 2.92 avg_batch 2039 min_space 894.502207 main_thread [2655] 6.030 Mpps (6.036 Mpkts 2.897 Gbps in 1001001 usec) 2.94 avg_batch 2039 min_space 895.504208 main_thread [2655] 6.030 Mpps (6.043 Mpkts 2.900 Gbps in 1002002 usec) 2.92 avg_batch 2034 min_space
100 rules
GENERATOR 075.735194 main_thread [2655] 14.087 Mpps (14.101 Mpkts 6.768 Gbps in 1001001 usec) 417.63 avg_batch 99999 min_space 076.769194 main_thread [2655] 14.111 Mpps (14.591 Mpkts 7.004 Gbps in 1033999 usec) 417.54 avg_batch 99999 min_space 077.772193 main_thread [2655] 14.081 Mpps (14.123 Mpkts 6.779 Gbps in 1003000 usec) 417.53 avg_batch 99999 min_space 078.782194 main_thread [2655] 14.093 Mpps (14.234 Mpkts 6.832 Gbps in 1010000 usec) 418.76 avg_batch 99999 min_space 079.783193 main_thread [2655] 14.091 Mpps (14.105 Mpkts 6.770 Gbps in 1001000 usec) 418.97 avg_batch 99999 min_space 080.785193 main_thread [2655] 14.120 Mpps (14.148 Mpkts 6.791 Gbps in 1001999 usec) 417.90 avg_batch 99999 min_space RECEIVER 075.470195 main_thread [2655] 1.821 Mpps (1.837 Mpkts 881.763 Mbps in 1009001 usec) 1.65 avg_batch 2041 min_space 076.471196 main_thread [2655] 1.822 Mpps (1.823 Mpkts 875.246 Mbps in 1001001 usec) 1.65 avg_batch 2040 min_space 077.473196 main_thread [2655] 1.822 Mpps (1.826 Mpkts 876.531 Mbps in 1001999 usec) 1.64 avg_batch 2040 min_space 078.474197 main_thread [2655] 1.823 Mpps (1.825 Mpkts 875.868 Mbps in 1001001 usec) 1.64 avg_batch 2041 min_space 079.476193 main_thread [2655] 1.823 Mpps (1.826 Mpkts 876.690 Mbps in 1001997 usec) 1.66 avg_batch 2041 min_space 080.478193 main_thread [2655] 1.823 Mpps (1.827 Mpkts 876.809 Mbps in 1002000 usec) 1.65 avg_batch 2040 min_space
1000 RULES
GENERATOR 135.977191 main_thread [2655] 14.072 Mpps (14.086 Mpkts 6.761 Gbps in 1001003 usec) 415.27 avg_batch 99999 min_space 136.978190 main_thread [2655] 14.045 Mpps (14.059 Mpkts 6.748 Gbps in 1000998 usec) 416.00 avg_batch 99999 min_space 137.980189 main_thread [2655] 14.158 Mpps (14.186 Mpkts 6.810 Gbps in 1001999 usec) 416.76 avg_batch 99999 min_space 138.982189 main_thread [2655] 14.065 Mpps (14.093 Mpkts 6.765 Gbps in 1002000 usec) 415.82 avg_batch 99999 min_space 139.984188 main_thread [2655] 14.124 Mpps (14.153 Mpkts 6.793 Gbps in 1002000 usec) 416.26 avg_batch 99999 min_space 140.985189 main_thread [2655] 14.067 Mpps (14.081 Mpkts 6.759 Gbps in 1001000 usec) 416.23 avg_batch 99999 min_space RECEIVER 135.684189 main_thread [2655] 247.680 Kpps (248.175 Kpkts 119.124 Mbps in 1002000 usec) 1.32 avg_batch 2042 min_space 136.686189 main_thread [2655] 247.667 Kpps (248.162 Kpkts 119.118 Mbps in 1002000 usec) 1.33 avg_batch 2042 min_space 137.688192 main_thread [2655] 247.683 Kpps (248.179 Kpkts 119.126 Mbps in 1002002 usec) 1.33 avg_batch 2041 min_space 138.690189 main_thread [2655] 247.707 Kpps (248.202 Kpkts 119.137 Mbps in 1001998 usec) 1.33 avg_batch 2041 min_space 139.692189 main_thread [2655] 247.715 Kpps (248.210 Kpkts 119.141 Mbps in 1001999 usec) 1.33 avg_batch 2042 min_space 140.694191 main_thread [2655] 247.688 Kpps (248.184 Kpkts 119.128 Mbps in 1002001 usec) 1.33 avg_batch 2042 min_space 250kpps GENERATOR 140.777924 main_thread [2655] 249.995 Kpps (250.368 Kpkts 120.177 Mbps in 1001494 usec) 512.00 avg_batch 99999 min_space 141.779398 main_thread [2655] 250.000 Kpps (250.368 Kpkts 120.177 Mbps in 1001474 usec) 512.00 avg_batch 99999 min_space 142.779430 main_thread [2655] 249.848 Kpps (249.856 Kpkts 119.931 Mbps in 1000032 usec) 512.00 avg_batch 99999 min_space 143.781430 main_thread [2655] 250.379 Kpps (250.880 Kpkts 120.422 Mbps in 1002000 usec) 512.00 avg_batch 99999 min_space 144.783809 main_thread [2655] 249.774 Kpps (250.368 Kpkts 120.177 Mbps in 1002379 usec) 512.00 avg_batch 99999 min_space 145.785391 main_thread [2655] 249.973 Kpps (250.368 Kpkts 120.177 Mbps in 1001582 usec) 512.00 avg_batch 99999 min_space RECEIVER 140.602431 main_thread [2655] 238.751 Kpps (238.990 Kpkts 114.715 Mbps in 1001000 usec) 1.33 avg_batch 2040 min_space 141.603430 main_thread [2655] 238.806 Kpps (239.045 Kpkts 114.742 Mbps in 1001000 usec) 1.32 avg_batch 2042 min_space 142.605430 main_thread [2655] 238.992 Kpps (239.470 Kpkts 114.946 Mbps in 1002000 usec) 1.33 avg_batch 2042 min_space 143.607430 main_thread [2655] 239.061 Kpps (239.539 Kpkts 114.979 Mbps in 1002000 usec) 1.33 avg_batch 2042 min_space 144.608430 main_thread [2655] 238.828 Kpps (239.067 Kpkts 114.752 Mbps in 1001000 usec) 1.32 avg_batch 2042 min_space 145.609430 main_thread [2655] 238.771 Kpps (239.010 Kpkts 114.725 Mbps in 1001000 usec) 1.32 avg_batch 2041 min_space root@vyos:~# top top - 21:24:47 up 2 days, 3:00, 3 users, load average: 9.65, 5.79, 4.08 Tasks: 292 total, 9 running, 133 sleeping, 0 stopped, 0 zombie %Cpu(s): 0.0 us, 0.0 sy, 0.0 ni, 54.4 id, 0.0 wa, 0.0 hi, 45.6 si, 0.0 st KiB Mem: 32384212 total, 1230972 used, 31153240 free, 39980 buffers KiB Swap: 0 total, 0 used, 0 free. 193472 cached Mem PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 37 root 20 0 0 0 0 R 100.0 0.0 61:37.45 ksoftirqd/5 47 root 20 0 0 0 0 R 99.3 0.0 32:01.26 ksoftirqd/7 27 root 20 0 0 0 0 R 98.9 0.0 32:30.85 ksoftirqd/3 17 root 20 0 0 0 0 R 98.6 0.0 61:32.11 ksoftirqd/1 117 root 20 0 0 0 0 R 85.7 0.0 60:29.26 ksoftirqd/21 127 root 20 0 0 0 0 S 85.3 0.0 32:06.30 ksoftirqd/23 107 root 20 0 0 0 0 S 85.0 0.0 32:11.25 ksoftirqd/19 57 root 20 0 0 0 0 R 84.3 0.0 61:18.69 ksoftirqd/9 97 root 20 0 0 0 0 R 84.3 0.0 60:30.46 ksoftirqd/17 87 root 20 0 0 0 0 S 82.3 0.0 32:06.30 ksoftirqd/15 67 root 20 0 0 0 0 S 82.0 0.0 30:28.22 ksoftirqd/11 77 root 20 0 0 0 0 R 79.0 0.0 34:21.50 ksoftirqd/13
10000 RULES
GENERATOR 451.981197 main_thread [2655] 21.257 Kpps (21.300 Kpkts 10.224 Mbps in 1002030 usec) 1.04 avg_batch 2045 min_space 452.983167 main_thread [2655] 21.267 Kpps (21.309 Kpkts 10.228 Mbps in 1001970 usec) 1.03 avg_batch 2044 min_space 453.984168 main_thread [2655] 21.270 Kpps (21.291 Kpkts 10.220 Mbps in 1001000 usec) 1.03 avg_batch 2045 min_space 454.985167 main_thread [2655] 21.272 Kpps (21.293 Kpkts 10.221 Mbps in 1001000 usec) 1.04 avg_batch 2044 min_space 455.986168 main_thread [2655] 21.275 Kpps (21.296 Kpkts 10.222 Mbps in 1001000 usec) 1.04 avg_batch 2044 min_space RECEIVER 450.979168 main_thread [2655] 21.259 Kpps (21.280 Kpkts 10.214 Mbps in 1000999 usec) 1.03 avg_batch 2045 min_space 451.981197 main_thread [2655] 21.257 Kpps (21.300 Kpkts 10.224 Mbps in 1002030 usec) 1.04 avg_batch 2045 min_space 452.983167 main_thread [2655] 21.267 Kpps (21.309 Kpkts 10.228 Mbps in 1001970 usec) 1.03 avg_batch 2044 min_space 453.984168 main_thread [2655] 21.270 Kpps (21.291 Kpkts 10.220 Mbps in 1001000 usec) 1.03 avg_batch 2045 min_space 454.985167 main_thread [2655] 21.272 Kpps (21.293 Kpkts 10.221 Mbps in 1001000 usec) 1.04 avg_batch 2044 min_space 455.986168 main_thread [2655] 21.275 Kpps (21.296 Kpkts 10.222 Mbps in 1001000 usec) 1.04 avg_batch 2044 min_space 100Kpps GENERATOR 351.597485 main_thread [2655] 100.133 Kpps (100.233 Kpkts 48.112 Mbps in 1001000 usec) 333.00 avg_batch 99999 min_space 352.599485 main_thread [2655] 100.033 Kpps (100.233 Kpkts 48.112 Mbps in 1002000 usec) 333.00 avg_batch 99999 min_space 353.600484 main_thread [2655] 99.800 Kpps (99.900 Kpkts 47.952 Mbps in 1000999 usec) 333.00 avg_batch 99999 min_space 354.601484 main_thread [2655] 100.133 Kpps (100.233 Kpkts 48.112 Mbps in 1001000 usec) 333.00 avg_batch 99999 min_space 355.602484 main_thread [2655] 100.133 Kpps (100.233 Kpkts 48.112 Mbps in 1001000 usec) 333.00 avg_batch 99999 min_space RECEIVER 350.236485 main_thread [2655] 21.253 Kpps (21.274 Kpkts 10.212 Mbps in 1001000 usec) 1.04 avg_batch 2045 min_space 351.238485 main_thread [2655] 21.262 Kpps (21.305 Kpkts 10.226 Mbps in 1001999 usec) 1.04 avg_batch 2045 min_space 352.239485 main_thread [2655] 21.253 Kpps (21.274 Kpkts 10.212 Mbps in 1001001 usec) 1.04 avg_batch 2044 min_space 353.240484 main_thread [2655] 21.259 Kpps (21.280 Kpkts 10.214 Mbps in 1000999 usec) 1.04 avg_batch 2045 min_space 354.241485 main_thread [2655] 21.263 Kpps (21.284 Kpkts 10.216 Mbps in 1001001 usec) 1.04 avg_batch 2044 min_space 355.243485 main_thread [2655] 21.257 Kpps (21.300 Kpkts 10.224 Mbps in 1002000 usec) 1.03 avg_batch 2045 min_space top Tasks: 288 total, 13 running, 129 sleeping, 0 stopped, 0 zombie %Cpu(s): 0.0 us, 0.0 sy, 0.0 ni, 50.0 id, 0.0 wa, 0.0 hi, 50.0 si, 0.0 st KiB Mem: 32384212 total, 1230436 used, 31153776 free, 39980 buffers KiB Swap: 0 total, 0 used, 0 free. 194620 cached Mem PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 67 root 20 0 0 0 0 R 100.0 0.0 22:11.26 ksoftirqd/11 27 root 20 0 0 0 0 R 99.9 0.0 23:57.93 ksoftirqd/3 37 root 20 0 0 0 0 R 99.9 0.0 53:02.69 ksoftirqd/5 47 root 20 0 0 0 0 R 99.9 0.0 23:28.68 ksoftirqd/7 87 root 20 0 0 0 0 R 99.9 0.0 23:50.67 ksoftirqd/15 97 root 20 0 0 0 0 R 99.9 0.0 52:08.81 ksoftirqd/17 107 root 20 0 0 0 0 R 99.9 0.0 23:50.83 ksoftirqd/19 117 root 20 0 0 0 0 R 99.9 0.0 52:10.24 ksoftirqd/21 17 root 20 0 0 0 0 R 99.6 0.0 52:59.34 ksoftirqd/1 57 root 20 0 0 0 0 R 99.6 0.0 53:01.28 ksoftirqd/9 77 root 20 0 0 0 0 R 99.6 0.0 26:05.28 ksoftirqd/13 127 root 20 0 0 0 0 R 99.6 0.0 23:49.06 ksoftirqd/23 10 root 20 0 0 0 0 I 0.3 0.0 0:04.48 rcu_sched 56 root rt 0 0 0 0 S 0.3 0.0 0:00.49 migration/9 1400 frr 20 0 51712 3244 1700 S 0.3 0.0 0:03.34 staticd
prerouting hook instead of forwarding
1 Krules
type filter hook prerouting priority -10; policy drop;
GENERATOR 820.604097 main_thread [2655] 14.132 Mpps (14.149 Mpkts 6.792 Gbps in 1001225 usec) 417.22 avg_batch 99999 min_space 821.604869 main_thread [2655] 14.113 Mpps (14.124 Mpkts 6.779 Gbps in 1000772 usec) 416.87 avg_batch 99999 min_space 822.605869 main_thread [2655] 14.122 Mpps (14.136 Mpkts 6.785 Gbps in 1001000 usec) 417.13 avg_batch 99999 min_space 823.606869 main_thread [2655] 14.177 Mpps (14.191 Mpkts 6.812 Gbps in 1001000 usec) 416.49 avg_batch 99999 min_space 824.607870 main_thread [2655] 14.066 Mpps (14.081 Mpkts 6.759 Gbps in 1001000 usec) 415.84 avg_batch 99999 min_space 825.608869 main_thread [2655] 14.154 Mpps (14.168 Mpkts 6.801 Gbps in 1001000 usec) 416.90 avg_batch 99999 min_space RECEIVER 820.869869 main_thread [2655] 247.033 Kpps (247.280 Kpkts 118.694 Mbps in 1000999 usec) 1.33 avg_batch 2042 min_space 821.871814 main_thread [2655] 247.044 Kpps (247.525 Kpkts 118.812 Mbps in 1001945 usec) 1.34 avg_batch 2042 min_space 822.872869 main_thread [2655] 246.997 Kpps (247.258 Kpkts 118.684 Mbps in 1001055 usec) 1.34 avg_batch 2041 min_space 823.873872 main_thread [2655] 246.986 Kpps (247.234 Kpkts 118.672 Mbps in 1001003 usec) 1.33 avg_batch 2041 min_space 824.875868 main_thread [2655] 246.962 Kpps (247.455 Kpkts 118.778 Mbps in 1001996 usec) 1.33 avg_batch 2042 min_space 825.877868 main_thread [2655] 246.961 Kpps (247.455 Kpkts 118.778 Mbps in 1002000 usec) 1.33 avg_batch 2041 min_space
Same results than forwarding hook
