From owner-freebsd-net@freebsd.org Mon Aug 26 16:25:39 2019 Return-Path: Delivered-To: freebsd-net@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 1F4F5DF774 for ; Mon, 26 Aug 2019 16:25:39 +0000 (UTC) (envelope-from vit@otcnet.ru) Received: from mail.otcnet.ru (mail.otcnet.ru [194.190.78.3]) by mx1.freebsd.org (Postfix) with ESMTP id 46HHRk06Gkz4cTD for ; Mon, 26 Aug 2019 16:25:37 +0000 (UTC) (envelope-from vit@otcnet.ru) Received: from Victors-MacBook-Air-2.local (unknown [194.190.78.9]) by mail.otcnet.ru (Postfix) with ESMTPSA id EF71789C2F; Mon, 26 Aug 2019 19:25:28 +0300 (MSK) Subject: Re: finding optimal ipfw strategy To: Eugene Grosbein , freebsd-net@freebsd.org References: <4ff39c8f-341c-5d72-1b26-6558c57bff8d@grosbein.net> From: Victor Gamov Organization: OTCnet Message-ID: Date: Mon, 26 Aug 2019 19:25:27 +0300 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:60.0) Gecko/20100101 Thunderbird/60.8.0 MIME-Version: 1.0 In-Reply-To: <4ff39c8f-341c-5d72-1b26-6558c57bff8d@grosbein.net> Content-Type: text/plain; charset=utf-8; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Rspamd-Queue-Id: 46HHRk06Gkz4cTD X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none; spf=pass (mx1.freebsd.org: domain of vit@otcnet.ru designates 194.190.78.3 as permitted sender) smtp.mailfrom=vit@otcnet.ru X-Spamd-Result: default: False [-2.56 / 15.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; NEURAL_HAM_MEDIUM(-0.99)[-0.990,0]; FROM_HAS_DN(0.00)[]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(-0.20)[+a:mail.otcnet.ru]; NEURAL_HAM_LONG(-1.00)[-0.999,0]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[otcnet.ru]; HAS_ORG_HEADER(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; NEURAL_HAM_SHORT(-0.38)[-0.375,0]; RCPT_COUNT_TWO(0.00)[2]; IP_SCORE(0.00)[country: RU(0.01)]; RCVD_NO_TLS_LAST(0.10)[]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ASN(0.00)[asn:50822, ipnet:194.190.78.0/24, country:RU]; MID_RHS_MATCH_FROM(0.00)[]; RCVD_COUNT_TWO(0.00)[2] X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Aug 2019 16:25:39 -0000 On 24/08/2019 22:34, Eugene Grosbein wrote: > 25.08.2019 1:13, Victor Gamov wrote: > >> I have nonstandard network task for my FreeBSD box: >> many VLANs bridged together via bridge interface and specific multicast traffic must be send >> from one VLAN to many (but not all) other VLANs. > > It is quite standard filtering bridge :-) Hi All More general question about my current config. I have about 200Mbit input multicasts which bridged and filtered later (about 380 Mbit bridged if trafshow does not lie me :-) ) My FreeBSD box (12.0-STABLE r348449 GENERIC amd64) has one "Intel(R) Xeon(R) CPU E31270 @ 3.40GHz" and 4-ports "Intel(R) PRO/1000 PCI-Express Network Driver". HT disabled and traffic mainly income via igb0 and out both via igb0 and igb2. About 30 VLANs now active some at igb0 and some at igb2. And I have following `top` stat: ===== CPU 0: 0.0% user, 0.0% nice, 80.5% system, 0.0% interrupt, 19.5% idle CPU 1: 0.0% user, 0.0% nice, 34.1% system, 0.0% interrupt, 65.9% idle CPU 2: 0.0% user, 0.0% nice, 17.1% system, 0.0% interrupt, 82.9% idle CPU 3: 0.0% user, 0.0% nice, 46.3% system, 0.0% interrupt, 53.7% idle ===== Also `vmstat -i |grep igb`: ===== irq264: igb0:rxq0 9310734762 5471 irq265: igb0:rxq1 10186691956 5985 irq266: igb0:rxq2 8190475727 4812 irq267: igb0:rxq3 10063786697 5913 irq268: igb0:aq 34 0 irq273: igb1:aq 1 0 irq274: igb2:rxq0 11010248236 6469 irq275: igb2:rxq1 10843712062 6371 irq276: igb2:rxq2 8810194905 5177 irq277: igb2:rxq3 10975949272 6449 irq278: igb2:aq 10 0 irq283: igb3:aq 1 0 ===== Is it possible to get CPU load about 30% at this config after ipfw optimization? Or may be main bottleneck is not ipfw-specific? -- CU, Victor Gamov