standard behaviour to an extent.
you should get better performance with all packets being large, as it is the number of packets per second that is the crux of the issue.
Easy to do in the lab, butno so easy in the real world.
the subsytems you mention are all user space, and since we are not using i386, the context switching is not as good.
With all this enabled at the same time I get 16 Mbit. Would a SG720 do the trick?
The requrement is 100Mbit internet connection, support for SIP proxy and PPTP VPN, less then $400. Perhaps a impossible to fulfill.
that is 100Mbps fulll duplex ( 200 Mbps ) or half duplex ?
the spec sheet attached, page 4, says the 720 will do 180 Mbps ( full duplex ) firewalling....but that is with everything else disabled.
you can see why you can pay big bucks for this sort of performance.
sb_utm_firewall.pdf 852.2 K