Re: Lua as a scripting language in NetBSD

[Joerg Sonnenberger <joerg%britannica.bec.de@localhost>]

On Sun, Oct 18, 2009 at 02:06:25PM -0400, Thor Lancelot Simon wrote:
> Lua is fast enough to do this for many small firewalls, far safer than
> using C code, and far more flexible than the canned types of packet
> matchers and actions offered by ipfilter or pf.  And it interfaces neatly
> with C code such that it's easy to write tiny shims which hook it up to
> our network stack using the existing packet filter hooks.

Actually, with the proper backend code e.g. to implement table matching
in C, it might be as fast as PF/ipfilter, if not faster -- thanks to JIT
support.

Joerg