Home / server / Questions / 221011
Accepted
RayQuang
Asked: 2011-01-12 00:31:25 +0800 CST

How much does a IPtables router slow down a connection?

  • 772

I would like to know if introducing a new gateway in my network will slow things down. The question may sound unclear but here is an illustration:

Before Installing gateway server

Main Router <=> switches <=>  servers

after installing gateway Server

Main Router <=> IPtables router <=> switches <=>  servers

My question is. How much will this delay incoming outgoing requests / file transfers. thanks, RayQuang

networking latency gateway

3 Answers

  1. Best Answer

    If the box has enough CPU/memory/bandwidth, nothing at all; almost every modern computer couldn't care less about handling routing for a 100 MBit network, unless you really throw in lots and lots of rules.

    • 6

  2. There will be a low amount of slow-down simply due to the extra processing needed to take the packets from one interface of your IPTables router to the other. There will also be some slow-down that would depend on the exact iptables config you are using (the tables are processed in sequence, each step taking a few machine instructions, generally taking mor time the more you're looking at).

    However, we're talking "probably sub-millisecond" delays, so in normal operation, you're unlikely to notice much.

    • 1

  3. What do you intend to do with iptables? If you are using QUEUE rules, taking the packets into user-space and mangling them then re-injecting them, it will take a long time.

    99% of the time it will be basically undetectable.

    • 1