Performance of reflexive ACLs vs. CBAC

[ofer]

Hello,

I'm looking for a performance comparison between reflexive ACLs and CBAC (e.g., which method filters traffic faster and by what factor).

A similar type of comparison between CBAC and regular ACLs is presented in "The Performance of the Cisco IOS Firewall Feature Set on Cisco 1600, 2500, 2600 and

3600 and 7200 Series Router Platforms" http://www.cisco.com/warp/partner/synchronicd/cc/pd/iosw/ioft/iofwft/tech/peios_pt.pdf

A pointer to how they are actually implemented (e.g., hashing methods etc) will be useful as well.

Thanks,

Ofer.

[a-vazquez]

Did you ever find anything? This would be an interesting comparison.