Home / server / Questions / 465463
In Process
VP.
Asked: 2013-01-10 08:13:15 +0800 CST

iptable DNAT poor performance

  • 772

I have the following rule for PORT FORWARDING:

root@foo:~# iptables -t nat -S
-P PREROUTING ACCEPT
-P INPUT ACCEPT
-P OUTPUT ACCEPT
-P POSTROUTING ACCEPT
-A PREROUTING  -p udp -m udp --dport 1:1024 -j DNAT --to-destination 192.168.100.10
-A PREROUTING  -p tcp -m tcp --dport 1:1024 -j DNAT --to-destination 192.168.100.10

running an iperf (tcp connection), I get a 10 x worse result than without Port Forwarding, just with routing. Because I couldn't find any real benchmark, i ask it here: Is that normal a so huge drop in the thoughput using iptables DNAT? Is that possible to optimize it?

iptables

0 Answers