[zorp] Zorp slows down web page viewing?

Joseph Kim zorp@lists.balabit.hu
Wed, 4 May 2005 13:53:46 -0700

Thank you for your reply.

Your suggestion worked just fine. I went even further and I used verbose=0, 
and it is much faster now.

And, for my own curiosity, I tried to compare the throughputs between using 
zorp and without using zorp.
In one configuration, I download a webpage 100 times through the machine 
with zorp running. In other configuration, I download the same webpage 100 
times directly from our internet gateway router without going through the 
zorp machine.

To my surpise, I got the following results:

Each test includes 100 downloads.

Test #                                Average throughput
Configuration                    Zorp                      Direct
1                                  737.4 Kbps             642.7 Kbps
2                                  711.7 Kbps             646.9 Kbps
3                                  721.6 Kbps             615.7 Kbps

According to the result, zorp actually made the connection faster.
What kind of magic are you guys playing?


----- Original Message ----- 
From: "Balazs Scheidler" <bazsi@balabit.hu>
To: <zorp@lists.balabit.hu>
Sent: Wednesday, May 04, 2005 6:44 AM
Subject: Re: [zorp] Zorp slows down web page viewing?

> On Tue, 2005-05-03 at 11:08 -0700, Joseph Kim wrote:
>> Thank you for your reply.
>> "Slow" means the following:
>> For the same webpage, without Zorp, it takes about a second to display. 
>> But,
>> with Zorp, it takes about 20 seconds to display. I understand that Zorp
>> would some latency, but not to this extent.
>> So I thought there should be something wrong.
> Yes, this latency is too much.
>> Configuration is like the following:
>> (1) Zorp machine is configured as a bridge mode with a bridge (br0) IP
>> address Currently, both eth2 and eth3 are added to the
>> bridge. And Zorp is running.
>> (2) Client notebook's IP address is, and is connected to 
>> eth2
>> of the Zorp machine.
>> (3) Eth3 of Zorp machine is connected to our Internet Gateway Router (IP
>> address through which it can go to the internet.
>> The file instances.conf includes the following line:
>>     zorp --verbose=10 --policy 
>> /usr/local/etc/zorp/policy.py --autobind-ip
> I think I've found the problem, --verbose=10 generates a _LOT_ of
> messages to your system log, try with the default value of 3 which is
> more sensible.
> -- 
> Bazsi
> _______________________________________________
> zorp mailing list
> zorp@lists.balabit.hu
> http://lists.balabit.hu/mailman/listinfo/zorp