New mirage nat interface, less mutable state

[hannesm]

No description provided.

[palainp]

Hi, thank you for your help on that.

The two PRs together are ready to merge according to my iperf3 tests. I have now those figures (TCP for 1', the mirage fw cpu is at 100% and the linux cpu (sys-net) is at around 70% (there is plenty of room for improvement there), + UDP for 1', the mirage CPU at 100% and the linux cpu at around 90%, the linux fw baseline is the same as in #130 I just noticed more dropping packet for UDP with linux than with mirage):

[user@fedora qubes-mirage-firewall]$ iperf3 -c 10.137.0.4 -p 5201 -b 0 -t 60
...
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bitrate         Retr
[  5]   0.00-60.00  sec  3.57 GBytes   510 Mbits/sec  529             sender
[  5]   0.00-60.00  sec  3.56 GBytes   510 Mbits/sec                  receiver

[user@fedora qubes-mirage-firewall]$ iperf3 -c 10.137.0.4 -p 5201 -b 0 -u -t 60
...
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bitrate         Jitter    Lost/Total Datagrams
[  5]   0.00-60.00  sec  4.61 GBytes   660 Mbits/sec  0.000 ms  0/3389750 (0%)  sender
[  5]   0.00-60.00  sec  4.61 GBytes   660 Mbits/sec  0.018 ms  785/3389697 (0.023%)  receiver

[hannesm]

thanks, merged in #152