NAT performance testing?

Question

linux

Good afternoon.
Manufacturers of home/office routers write in the specifications such words as: "NAT performance 700Mbps", "hardware NAT", etc...
At home, I use FreeBSD as a router and I am sure that its performance is better than any home/office router, but I have no proof.
With the help of what utility can you change the performance of NAT so that you can absolutely say that this or that router does its job better? It is desirable under Linux, of course, but also under Windows will approach.

Answer 1

I would test iperf put the router in the middle between two machines, set up nat and prescribe ip's allow PC1(192.168.0.2)
-ROUTER
(192.168.0.1/89.188.252.2)-PC2(89.188.252.1)

Answer 2

It’s elementary that you won’t be able to test it, a lot here depends on the number of clients behind the nat, one stream in the nat for 700 megabits and ten thousand streams in the nat for 700 megabits are different things, it’s very easy to test if you are an administrator at the provider.
Yes, any i5 router will be more powerful than a home router with a 300 megahertz process, simply because the i5 has 4 cores of 2 gigahertz each.

Answer 3

In general, performance is measured in packets per second. Here, look at an example (Performance test results). NAT is a rather expensive operation, for example, a Celeron 2.6 GHz on a 478 socket with 266 MHz RAM could easily pass and at the same time analyze (determine the type of packet, protocol, and write it all to the database) 200 Mbit / s traffic with a load of about 50 %.
Yes, and hardware nat is not always good. For example, if you want to do the so-called NAT Loopback through iptables, and with hardware nat enabled, it’s normal for you not to do this, because. nat binds before loopback can be executed.

Answer 4

I'm sure its performance is better than any home/office router

There are not only "office", but also enterprise or carrier class routers. With hardware nat. There we are talking about hundreds of gigabits / terabits. I'm afraid that your computer will only be able to withstand cheap software platforms, and these (for example) boxes will crush it by an indecent margin.

Answer 5

I tested this way, I took the router, I took the program for ddos ​​attacks and opened at first 1000 simultaneous connections, then 2000 and so on incrementally and when the peak performance was reached, the router admin panel stopped responding if the router admin panel goes down, then the router processor is overloaded, but RAM is also important here, as in it caches connections