Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 06 Oct 2009 18:14:58 +0500
From:      rihad <rihad@mail.ru>
To:        Eugene Grosbein <eugen@kuzbass.ru>
Cc:        freebsd-net@freebsd.org, Luigi Rizzo <rizzo@iet.unipi.it>, Julian Elischer <julian@elischer.org>
Subject:   Re: dummynet dropping too many packets
Message-ID:  <4ACB42D2.2070909@mail.ru>
In-Reply-To: <20091006100726.GA26426@svzserv.kemerovo.su>
References:  <4AC9CFF7.3090208@mail.ru> <20091005110726.GA62598@onelab2.iet.unipi.it> <4AC9D87E.7000005@mail.ru> <20091005120418.GA63131@onelab2.iet.unipi.it> <4AC9E29B.6080908@mail.ru> <20091005123230.GA64167@onelab2.iet.unipi.it> <4AC9EFDF.4080302@mail.ru> <4ACA2CC6.70201@elischer.org> <4ACAFF2A.1000206@mail.ru> <4ACB0C22.4000008@mail.ru> <20091006100726.GA26426@svzserv.kemerovo.su>

next in thread | previous in thread | raw e-mail | index | archive | help
Eugene Grosbein wrote:
> On Tue, Oct 06, 2009 at 02:21:38PM +0500, rihad wrote:
> 
>> Is there some limit on the number of IP addresses in an ipfw table?
> 
> No, generally handles much more. Please show your ipfw rule(s)
> containing 'tablearg'.
> 

01031         x            x allow ip from any to any
01040         x            x skipto 1100 ip from table(127) to any out 
recv bce0 xmit bce1
01060         x            x pipe tablearg ip from any to table(0) out 
recv bce0 xmit bce1
01070         x            x allow ip from any to table(0) out recv bce0 
xmit bce1
01100         x            x pipe tablearg ip from any to table(2) out
65535         x            x allow ip from any to any



table(127) contains country-wide ISPs' netblocks (under 100 entries).
table(0) and table(2) contain same user IP addresses, but different pipe 
IDs - normally around 3-4k entries each.

Now please pay special attention to rule 1031. I've added it to bypass 
dummynet and stop packets from being dropped for now. Normally the rule 
isn't there.

As I found out today after rebooting, drops only start occurring when 
the number of entries in table(0) exceeds 2000 or so (please see my 
previous email). Maybe it's a coincidence - I don't know. Global traffic 
load doesn't matter - it was approximately the same before and after the 
drops (around 450 mbit/s).



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4ACB42D2.2070909>