From owner-freebsd-net@FreeBSD.ORG Wed Nov 21 02:32:17 2012 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 96E6B7A9 for ; Wed, 21 Nov 2012 02:32:17 +0000 (UTC) (envelope-from if@xip.at) Received: from chile.gbit.at (ns1.xip.at [193.239.188.99]) by mx1.freebsd.org (Postfix) with ESMTP id DAFCC8FC08 for ; Wed, 21 Nov 2012 02:32:16 +0000 (UTC) Received: (qmail 3677 invoked from network); 21 Nov 2012 03:32:14 +0100 Received: from fw.xip.at (HELO ?127.0.0.1?) (89.207.145.147) by chile.gbit.at with SMTP; 21 Nov 2012 03:32:14 +0100 Message-ID: <50AC3D31.1070905@xip.at> Date: Wed, 21 Nov 2012 03:32:17 +0100 From: Ingo Flaschberger User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:16.0) Gecko/20121026 Thunderbird/16.0.2 MIME-Version: 1.0 To: Barney Cordoba Subject: Re: FreeBSD boxes as a 'router'... References: <1353454215.20382.YahooMailClassic@web121601.mail.ne1.yahoo.com> In-Reply-To: <1353454215.20382.YahooMailClassic@web121601.mail.ne1.yahoo.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-net@freebsd.org X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Nov 2012 02:32:17 -0000 Am 21.11.2012 00:30, schrieb Barney Cordoba: > > --- On Tue, 11/20/12, Ingo Flaschberger wrote: > >> stems (Intel 82541GI) polling prevent live-locks. >> >> Best test: >> Loop a GigE Switch, inject a Packet and plug it into the >> test-box. > Yeah, thats a good real-world test. > > To me "performance" is not "burning a cpu" to get some extra pps. > Performance is not dropping buckets of packets. Performance is using > less cpu to do the same amount of work. > > Is a machine that benchmarks at 998Mb/s at 95% cpu really a "higher > performance" system than one that does 970Mb/s and uses 50% of the cpu? Talking about Mb/s is definitly the wrong way - forwarding performance is measured in pps. > The measure of performance is to manage an entire load without dropping > any packets. If your machine goes into live-lock, then you need more > machine. Hacking it so that it drops packets is hardly a solution. No, because standard internet traffic has not 100% 64b packets - but when a hacker attacks - it has (dos). Then it's important to know - who is the attacker and keep the box up even if it drops packets. If you don't like packet drops - go - buy some juniper (which also use FreeBSD). Kind regards, Ingo Flaschberger