On Wed, 14 Dec 2005, Joy Latten wrote:

> A while back I took up some SELinux performance work that a colleague of
> mine, Kylie Hall had done. The patch added ipv4 address, ipv6 address
> and port caches to SELinux. I believe I sent the patch a while back
> also, but can do so again if anyone is interested. The caches are
> exercised in such SELinux hooks as socket_bind(), socket_connect() and
> socket_sock_rcv_skb(). Bandwidth has allowed me some time to work on
> this. Can anyone recommend a benchmark that will exercise this code? I
> figured something that utilized many ip addresses or ports.

apachebench is a good basic test, and you can also try webstone, lmbench and iperf.

Not sure how to realistically simulate large numbers of IP addresses.

• James -- James Morris <jmorris@namei.org>

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.