NAT without offloading capabilities microbenchmarking: losing 5 - 10%, depending on traffic pattern on i386/amd64, depends a lot on hardware specifics cache architecture/size(s), buses etc these almost certainly have offload capabilities acceptable in my book here's a nickel, get reasonable hardware