Re: Thousands of interfaces

From: Stephen Hemminger <shemminger@xxxxxxxx>
Date: Tue, 31 Oct 2006 10:22:22 -0800

On Tue, 31 Oct 2006 01:31:54 -0800 (PST)
David Miller <davem@xxxxxxxxxxxxx> wrote:

From: Peter Hicks <peter.hicks@xxxxxxxxxxx>
Date: Tue, 31 Oct 2006 09:25:50 +0000

[ Discussion belongs on netdev@xxxxxxxxxxxxxxx, added to CC: ]

I have a dual 3GHz Xeon machine with a 2.4.21 kernel and thousands (15k+) of
ipip tunnel interfaces. These are being used to tunnel traffic from remote
routers, over a private network, and handed off to a third party.
...
Is it possible to speed up creation of the interfaces? Currently it takes
around 24 hours. Is there are more efficient way to handle a very large
number of IP-IP tunnels? Would upgrading to a 2.6 kernel be of use?



2.4 has a several N^2 searches for interfaces (and is in deep freeze by now).
2.6 had several changes to handle 1000's of interfaces.

Oops I didn't notice this was with 2.4.x. Indeed, 2.4.x definitely
cannot handle large numbers of networking interfaces at all without
major surgery. 2.6.x should handle this significantly better.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

Relevant Pages

  • Re: Thousands of interfaces
    ... ipip tunnel interfaces. ... These are being used to tunnel traffic from remote ... I don't know whenever their implementation scales up to 15K+ peers any better than ...
    (Linux-Kernel)
  • Re: Thousands of interfaces
    ... These are being used to tunnel traffic from remote ... routers, over a private network, and handed off to a third party. ... has a several N^2 searches for interfaces. ...
    (Linux-Kernel)
  • overall procedure for Solaris tunnel
    ... A basic checklist to establish a tunnel on Solaris 9: ... * Setup SAs for standard transport mode between two "outside" ... tunnel on both ends of the inside interfaces, ... Bring it up and voila - instant tunnel between two Solaris hosts. ...
    (comp.unix.solaris)
  • Re: esp tunnel without gif(4) [Was Re: vpn1/fw1 NG to ipsec/racoon troubles, help please ...]
    ... Crist> I've never figured out why people use gifinterfaces when ESP ... Emss> beetween two lans without gif. ... I've tried without gif tunnel and it ...
    (FreeBSD-Security)
  • Re: HSRP and Policy Route
    ... routers think they are the local owner of the 5.1 subnet, ... now I am taking only default route from the ISP's but I guess if I ... interfaces you pasted are just layer 3 based on your comments. ... of the subnet as you are saying that when Core 2 owns the 5.X network, ...
    (comp.dcom.sys.cisco)