From 787698265fb0237b6c2b80be69dcbb4535b82b16 Mon Sep 17 00:00:00 2001 From: Hayato Kiwata Date: Sun, 26 Jul 2026 15:47:22 +0900 Subject: [PATCH 1/2] fix: benchmark pasta, not slirp4netns Signed-off-by: Hayato Kiwata --- hack/benchmark-iperf3-net.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/hack/benchmark-iperf3-net.sh b/hack/benchmark-iperf3-net.sh index 4d15fac4..f64576ab 100755 --- a/hack/benchmark-iperf3-net.sh +++ b/hack/benchmark-iperf3-net.sh @@ -1,13 +1,13 @@ #!/bin/bash source $(realpath $(dirname $0))/common.inc.sh function benchmark::iperf3::pasta() { - INFO "[benchmark:iperf3] slirp4netns ($@)" + INFO "[benchmark:iperf3] pasta ($@)" statedir=$(mktemp -d) if echo "$@" | grep -q -- --detach-netns; then IPERF3C="nsenter -n${statedir}/netns $IPERF3C" fi set -x - $ROOTLESSKIT --state-dir=$statedir --net=slirp4netns $@ -- $IPERF3C 10.0.2.2 + $ROOTLESSKIT --state-dir=$statedir --net=pasta $@ -- $IPERF3C 10.0.2.2 set +x } From a20deb347efaab3c66b6d70a1d0595ab8cda260d Mon Sep 17 00:00:00 2001 From: Hayato Kiwata Date: Sun, 26 Jul 2026 17:50:14 +0900 Subject: [PATCH 2/2] docs: refresh network driver benchmark table Signed-off-by: Hayato Kiwata --- docs/network.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/docs/network.md b/docs/network.md index 8d3c0b98..d51a5f38 100644 --- a/docs/network.md +++ b/docs/network.md @@ -9,17 +9,17 @@ RootlessKit provides several drivers for providing network connectivity: * `--net=lxc-user-nic`: use `lxc-user-nic` (experimental) * `--net=gvisor-tap-vsock`: use [gvisor-tap-vsock](https://github.com/containers/gvisor-tap-vsock) (experimental) -[Benchmark: iperf3 from the child to the parent (Apr 10, 2026)](https://github.com/rootless-containers/rootlesskit/actions/runs/24200485791/job/70642399211): +[Benchmark: iperf3 from the child to the parent (Jul 26, 2026)](https://github.com/rootless-containers/rootlesskit/actions/runs/30191669102/job/89765864664): | Driver | MTU=1500 | MTU=65520 |---------------------------------------|------------|------------- -|`slirp4netns` | 0.84 Gbps | 6.17 Gbps -|`slirp4netns` (with sandbox + seccomp) | 0.80 Gbps | 6.19 Gbps -|`vpnkit` | 0.10 Gbps |(Unsupported) -|`pasta` | 0.87 Gbps | 6.48 Gbps -|`gvisor-tap-vsock` | 1.55 Gbps | 5.40 Gbps -|`lxc-user-nic` | 29.3 Gbps | 30.4 Gbps -|(rootful veth) | (35.0 Gbps)| (36.2 Gbps) +|`slirp4netns` | 1.69 Gbps | 8.11 Gbps +|`slirp4netns` (with sandbox + seccomp) | 1.68 Gbps | 8.32 Gbps +|`vpnkit` | 0.14 Gbps |(Unsupported) +|`pasta` | 0.24 Gbps | 31.9 Gbps +|`gvisor-tap-vsock` | 2.46 Gbps | 8.75 Gbps +|`lxc-user-nic` | 49.1 Gbps | 50.7 Gbps +|(rootful veth) | (49.3 Gbps)| (50.8 Gbps) * To be documented: [`bypass4netns`](https://github.com/rootless-containers/bypass4netns) for native performance.