xinet vs iptables for port forwarding performance

Posted by jamie.mccrindle on Super User See other posts from Super User or by jamie.mccrindle
Published on 2010-05-27T08:59:35Z Indexed on 2010/05/27 9:02 UTC
Read the original article Hit count: 418

I have a requirement to run a Java based web server on port 80. The options are:

  • Web proxy (apache, nginx etc.)
  • xinet
  • iptables
  • setuid

The baseline would be running the app using setuid but I'd prefer not to for security reasons. Apache is too slow and nginx doesn't support keep-alives so new connections are made for every proxied request.

xinet is easy to set up but creates a new process for every request which I've seen cause problems in a high performance environment.

The last option is port forwarding with iptables but I have no experience of how fast it is.

Of course, the ideal solution would be to do this on a dedicated hardware firewall / load balancer but that's not an option at present.

© Super User or respective owner

Related posts about linux

Related posts about Performance