From owner-freebsd-net@FreeBSD.ORG  Tue Dec 16 04:39:47 2003
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id DEE4016A4CE
	for <freebsd-net@freebsd.org>; Tue, 16 Dec 2003 04:39:47 -0800 (PST)
Received: from sccrmhc12.comcast.net (sccrmhc12.comcast.net [204.127.202.56])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 7D27643D1F
	for <freebsd-net@freebsd.org>; Tue, 16 Dec 2003 04:39:46 -0800 (PST)
	(envelope-from julian@elischer.org)
Received: from interjet.elischer.org ([24.7.73.28])
          by comcast.net (sccrmhc12) with ESMTP
          id <2003121612394501200r40i7e>; Tue, 16 Dec 2003 12:39:45 +0000
Received: from localhost (localhost.elischer.org [127.0.0.1])
	by InterJet.elischer.org (8.9.1a/8.9.1) with ESMTP id EAA43057;
	Tue, 16 Dec 2003 04:39:43 -0800 (PST)
Date: Tue, 16 Dec 2003 04:39:42 -0800 (PST)
From: Julian Elischer <julian@elischer.org>
To: Andriy Korud <akorud@polynet.lviv.ua>
In-Reply-To: <1071564482.3fdec6c2ac5fb@isp.polynet.lviv.ua>
Message-ID: <Pine.BSF.4.21.0312160439180.39201-100000@InterJet.elischer.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
cc: freebsd-net@freebsd.org
Subject: Re: Large scale NAT problems
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 16 Dec 2003 12:39:48 -0000

did you try natd?
(for comparison)

On Tue, 16 Dec 2003, Andriy Korud wrote:

> Hi,
> I'm tring to make NAT on FreeBSD box for 2500 clients on 35Mbit uplink.
> Box is Xeon 2.8GHz, 1G RAM, 2xIntel PRO/1000 (em) adapters.
> FreeBSD 4.9-STABLE, kernel is configured for single processor (HT not used),
> with DEVICE_POLLING and HZ=2000, LARGE_NAT defined.
> Nat was done using ipnat, no additional filtering.
> 
> The problem is that when traffic grows to 10Mbit and number of active NAT
> sessions reach 70000, CPU usage exponentialy grows and system spends all CPU
> time in interrupts handling. 
> The system become completely unreponsible and unsable and only hard reset is the
> solution.
> 
> And worse thing is that Linux on Cel/800 with SOHO cards do that NATing with 5%
> CPU load without any problem :-(.
> 
> Maybe I shoud try natd? May this help?
> Any suggestions?
> 
> thanks in advance,
> 
> Andriy Korud
> 
> 
> _______________________________________________
> freebsd-net@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
>