This commit from Bill Yuan says “highspeed lockless in-kernel NAT”, and lists a huge number of changes for ipfw3. How much of a change is it? I don’t know; there isn’t a matching documentation update and I don’t have a way to test.
A running description of activity related to DragonFly BSD.
That is a hard thing to test. differences would likely be hard to see if the number behind the NAT is small, then you have the size of the pipe to think about (if it’s big and you don’t have enough clients you may not hit any places that benefit from the changes.)
But all good stuff.
1. RB tree for dynamic rules
2. RB tree and multidimentional array for NAT
What major locks in Dragonflybsd still exist?