title: Iptables filtering performance: TCP and UDP
body: <p>i am writting to ask about iptables performance in TCP and UDP filtering. I was testing it with large number of iptables rules.
  When in FORWARD chain is 10 000 mixed TCP and UDP rules i get TCP throughput 35.5 Mbits/sec and UDP  throughput 25.2 Mbits/sec  </p>
  
  <p>I am confused why TCP throughput is bigger than UDP? I thought TCP will be slower because of ACK packets. I have already tested it with cisco ACL, there UDP is faster. </p>
  
  <p>PC ---- FW ----- PC
  Topology</p>