I have implemented a transparent proxy using ipchains on RH 6.2 kernel
2.2.16.
I use the ipchains to redirect incoming traffic to the port on which
the local proxy server listens.
When tested under load (thousands transactions per second) I get
dramatic decrease in performance compared to a transparent proxy
implementation without ipchains. In addition I noticed there is an
increase in the system CPU usage in the "with ipchains"
implementation.
From searching in some newsgroups, I read the ipchains implementation
does not introduce any overhead to the networking stack flow (but I am
not so sure if it is true).
Does anyone know if it effects system resources when thousands of
transactions per seconds are involved? - Doesn`t the ipchains
implementation introduce any overhead when used to implement
transparent proxy?
Thanks,
Asaf