[Xen-users] Low performance when use DNAT rules

["Dmytro Korochkin" <mityacor@xxxxxxxxx>]

Hi there

I've built a configuration based on following document:
http://en.opensuse.org/Xen3_and_a_Virtual_Network
I have one physical interface on dom0 - eth0 with public IP, xenbr0 with
local IP(10.100.0.1/24) and 8 domU with local IP from the same network as
xenbr0.
IP address on xenbr0 is gw for all domU.

ip forwarding is enabled.

My dom0 iptables rules:
-A PREROUTING -d XX.XX.XX.XX -p tcp -m tcp --dport 5080 -j DNAT
--to-destination 10.100.0.7:80
-A POSTROUTING -o eth0 -j SNAT --to-source XX.XX.X.XX

The SNAT rule works correctly, I can reach internet hosts from domU.

At the same time I have problem with the DNAT rule. I'm able to connect to
domU from the Internet and when I try to download file through http protocol
I can reach only 40kb/sec while I have 100Mb Internet link. I tried other
protocols: scp, ftp but problem still exists.

I've tested connection between domU --> domU, domU ---> dom0, dom0 --->
dom, Internet ---> dom0 and dom0 ---> Internet - speed is acceptable.
Also I tried to play with
"iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT
--to-ports 8080" on dom0. Speed is good too.

Please help me to solve the problem

Regards
-- 
Dmytro

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users