При включении второго интерфейса суммарная нагружка выросла до 2Гбит, потери пропали, что не может не радовать. Но загрузка ядер interrupt-ами осталась на том же уровне.
ipfw.conf:
add permit udp from any to xxx.xxx.xxx.248 dst-port 53 via vlan10 out
add permit udp from any to xxx.xxx.xxx.253 dst-port 53 via vlan10 out
add permit tcp from any to xxx.xxx.xxx.251 dst-port 80 via vlan10 out
add permit tcp from any to xxx.xxx.xxx.247 dst-port 80 via vlan10 out
add permit tcp from any to xxx.xxx.xxx.248 dst-port 80 via vlan10 out
add fwd 127.0.0.1,8003 tcp from table(2) to any dst-port 80 via vlan190 out
add fwd 127.0.0.1,8003 tcp from table(2) to any dst-port 80 via vlan191 out
add fwd 127.0.0.1,8003 tcp from table(2) to any dst-port 80 via vlan195 out
add fwd 127.0.0.1,8003 tcp from table(2) to any dst-port 80 via vlan46 out
add deny ip from table(2) to any via vlan190 out
add deny ip from table(2) to any via vlan191 out
add deny ip from table(2) to any via vlan195 out
add deny ip from table(2) to any via vlan46 out
add fwd 127.0.0.1,8004 tcp from table(6) to any dst-port 80 via vlan190 out
add fwd 127.0.0.1,8004 tcp from table(6) to any dst-port 80 via vlan191 out
add fwd 127.0.0.1,8004 tcp from table(6) to any dst-port 80 via vlan195 out
add fwd 127.0.0.1,8004 tcp from table(6) to any dst-port 80 via vlan46 out
add deny ip from table(6) to any via vlan190 out
add deny ip from table(6) to any via vlan191 out
add deny ip from table(6) to any via vlan195 out
add deny ip from table(6) to any via vlan46 out
add fwd 127.0.0.1,8002 tcp from table(3) to any dst-port 80 via vlan190 out
add fwd 127.0.0.1,8002 tcp from table(3) to any dst-port 80 via vlan191 out
add fwd 127.0.0.1,8002 tcp from table(3) to any dst-port 80 via vlan195 out
add fwd 127.0.0.1,8002 tcp from table(3) to any dst-port 80 via vlan46 out
add deny ip from table(3) to any via vlan190 out
add deny ip from table(3) to any via vlan191 out
add deny ip from table(3) to any via vlan195 out
add deny ip from table(3) to any via vlan46 out
add fwd 127.0.0.1,8008 tcp from table(8) to any dst-port 80 via vlan190 out
add fwd 127.0.0.1,8008 tcp from table(8) to any dst-port 80 via vlan191 out
add fwd 127.0.0.1,8008 tcp from table(8) to any dst-port 80 via vlan195 out
add fwd 127.0.0.1,8008 tcp from table(8) to any dst-port 80 via vlan46 out
add deny ip from table(8) to any via vlan190 out
add deny ip from table(8) to any via vlan191 out
add deny ip from table(8) to any via vlan195 out
add deny ip from table(8) to any via vlan46 out
add fwd 127.0.0.1,8005 tcp from table(4) to any dst-port 80 via vlan190 out
add fwd 127.0.0.1,8005 tcp from table(4) to any dst-port 80 via vlan191 out
add fwd 127.0.0.1,8005 tcp from table(4) to any dst-port 80 via vlan195 out
add fwd 127.0.0.1,8005 tcp from table(4) to any dst-port 80 via vlan46 out
add fwd 127.0.0.1,8012 tcp from table(9) to any dst-port 80 via vlan190 out
add fwd 127.0.0.1,8012 tcp from table(9) to any dst-port 80 via vlan191 out
add fwd 127.0.0.1,8012 tcp from table(9) to any dst-port 80 via vlan195 out
add fwd 127.0.0.1,8012 tcp from table(9) to any dst-port 80 via vlan46 out
add 9000 count ip from xxx.xxx.221.0/24 to any via vlan191 out
add 9010 count ip from any to xxx.xxx.221.0/24 via vlan191 in
pipe 60 config bw 512Kbytes mask src-ip 0xffffffff
pipe 61 config bw 5120Kbytes mask dst-ip 0xffffffff
pipe 100 config bw 1024Kbytes mask src-ip 0xffffffff
pipe 101 config bw 10240Kbytes mask dst-ip 0xffffffff
pipe 110 config bw 10Mbit/s mask src-ip 0xffffffff
pipe 111 config bw 10Mbit/s mask dst-ip 0xffffffff
pipe 150 config bw 1536Kbytes mask src-ip 0xffffffff
pipe 151 config bw 10240Kbytes mask dst-ip 0xffffffff
pipe 152 config bw 750Kbytes mask src-ip 0xffffffff
pipe 153 config bw 1500Kbytes mask dst-ip 0xffffffff
pipe 200 config bw 2560Kbytes mask src-ip 0xffffffff
pipe 201 config bw 10240Kbytes mask dst-ip 0xffffffff
pipe 300 config bw 4096Kbytes mask src-ip 0xffffffff
pipe 301 config bw 10240Kbytes mask dst-ip 0xffffffff
pipe 302 config bw 1500Kbytes mask src-ip 0xffffffff
pipe 303 config bw 3000Kbytes mask dst-ip 0xffffffff
pipe 500 config bw 4096Kbytes mask src-ip 0xffffffff
pipe 501 config bw 10240Kbytes mask dst-ip 0xffffffff
pipe 600 config bw 3600Kbytes mask src-ip 0xffffffff
pipe 601 config bw 3000Kbytes mask dst-ip 0xffffffff
add 10000 pipe tablearg ip from table(100) to any via vlan190 out
add 10010 pipe tablearg ip from table(100) to any via vlan191 out
add 10020 pipe tablearg ip from any to table(101) via vlan190 in
add 10030 pipe tablearg ip from any to table(101) via vlan191 in