Great Circle Associates Firewalls
(June 1994)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Fwtk on Solaris2.3
From: Marcus J Ranum <mjr @ tis . com>
Date: Fri, 24 Jun 94 09:45:24 EDT
To: Larry_Chin @ ca . cch . com, jle @ ost . fr
Cc: firewalls @ GreatCircle . COM

>We actually went about doing this and managed to port all but the
>tools, which is a *LOT* of work. However, we found that the ported
>version was *SLOW*, much slower than the SunOs version. This could
>probably be remedied by optimizing the code, but it was more work than
>we really wanted to do.

	Interesting to hear there are performance problems with
the toolkit under Solaris...

	The toolkit software doesn't actually *DO* much -- 9/10 of
the code is logging and error checking; perhaps more than 9/10.
The remaining code is almost completely system-bound. The proxies,
for example, rely heavily on socket operations and select. I suspect
you're seeing a difference in operating system performance on basic
network operations. I don't know a way to improve that short of
rewriting the networking parts of the toolkit completely [and even
then, who knows!?]

	With respect to the toolkit's being a lot of effort to port
to Solaris -- we're working on improving the situation for upcoming
versions. If anyone is actively working on porting toolkit code,
please contact me, and I'll get you a copy of the internal prerelease
to work from, so we'll be less out of sync.

mjr.


Follow-Ups:
Indexed By Date Previous: Re: Fwtk on Solaris2.3
From: Frederick M Avolio <avolio @ tis . com>
Next: Re: Private Mail
From: "Robert G. Moskowitz" <0003858921 @ mcimail . com>
Indexed By Thread Previous: Re: Fwtk on Solaris2.3
From: Larry Chin <Larry_Chin @ ca . cch . com>
Next: Re: Fwtk on Solaris2.3
From: James Tanis <jtt @ cs . columbia . edu>

Google
 
Search Internet Search www.greatcircle.com