From owner-freebsd-net@freebsd.org Thu Dec 21 21:03:35 2017 Return-Path: Delivered-To: freebsd-net@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D4EFCE8AA49; Thu, 21 Dec 2017 21:03:35 +0000 (UTC) (envelope-from srs0=bbyf=dr=sigsegv.be=kristof@codepro.be) Received: from venus.codepro.be (venus.codepro.be [IPv6:2a01:4f8:162:1127::2]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "*.codepro.be", Issuer "Gandi Standard SSL CA 2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 9D494789AD; Thu, 21 Dec 2017 21:03:35 +0000 (UTC) (envelope-from srs0=bbyf=dr=sigsegv.be=kristof@codepro.be) Received: from [192.168.228.1] (ptr-8ripyyhtmq100mi0yvj.18120a2.ip6.access.telenet.be [IPv6:2a02:1811:2419:4e02:e137:9435:e3a1:1a8f]) (Authenticated sender: kp) by venus.codepro.be (Postfix) with ESMTPSA id A78FC37C85; Thu, 21 Dec 2017 22:03:33 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sigsegv.be; s=mail; t=1513890213; bh=xvo9zMCVIMPojS8zyhAPkTetnm0MPO1558zfbZsWy0s=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=lNNwIGEDS0F1GHY6Bj5lZ9DTjQ7vgyQUNL2ZnugnkGnzXUc8vAHXo6RzgybgZAqZu enje2OtN10mwPmcEdN6QKYriRUSkHi/1FuHX2eFdv8ETu3UomOyQwuhWJu0IDbA/Rs z8eebIPX0dB9cqVCtS9ipiTBYAbt9lxdew8BCqKE= From: "Kristof Provost" To: "Michael Grimm" Cc: freebsd-net@freebsd.org, freebsd-jail@FreeBSD.org Subject: Re: performance issue within VNET jail Date: Thu, 21 Dec 2017 22:03:32 +0100 X-Mailer: MailMate (2.0BETAr6102) Message-ID: In-Reply-To: <8102F5FD-DCFC-4EF8-A443-9E6C9EB1F467@ellael.org> References: <4F5EE3F6-0163-4435-8726-56B0D4AE9FAF@ellael.org> <8102F5FD-DCFC-4EF8-A443-9E6C9EB1F467@ellael.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 Dec 2017 21:03:35 -0000 On 21 Dec 2017, at 21:50, Michael Grimm wrote: > Kristof Provost wrote: >> >> On 21 Dec 2017, at 21:24, Michael Grimm wrote: > >>> I do have to admit that I am lost here, and that I cannot think >>> about what is going wrong. The last download I did try at my old >>> severs has been some weeks ago. Ever since I did upgrade FreeBSD >>> 11.1-STABLE, and I did move my infrastructure from bare metal to >>> cloud, thus I cannot test anymore if my old servers would have shown >>> that performance issue in the meantime. >>> >>> Thus any feedback is highly recommended! > >> Can you try turning off TSO? (`ifconfig $ifname -tso`) >> >> There have been issues with pf and TSO checksums, which looked a lot >> like this (i.e. bad TCP performance). Those problems should be fixed, >> but this is easy to test. >> > > I did try it, but without success. > Hmm. I’ve got no ideas at the moment. I run a very similar setup (although on CURRENT), and see no performance issues from my jails. Can you test a performance test without pf? Perhaps from the local LAN for example? That should help narrow it down a bit, at least. Regards, Kristof