Date: Thu, 21 Dec 2017 22:42:22 +0100 From: Michael Grimm <trashcan@ellael.org> To: Kristof Provost <kristof@sigsegv.be> Cc: freebsd-net@freebsd.org, freebsd-jail@FreeBSD.org Subject: Re: performance issue within VNET jail Message-ID: <BE008733-5AD8-4DAC-A6A5-BC3FCEC16202@ellael.org> In-Reply-To: <DB5DE737-7171-4953-AF98-45F1BE7AF09E@sigsegv.be> References: <4F5EE3F6-0163-4435-8726-56B0D4AE9FAF@ellael.org> <B6446660-9FD2-4C28-A3A2-8AC99624C7FF@sigsegv.be> <8102F5FD-DCFC-4EF8-A443-9E6C9EB1F467@ellael.org> <DB5DE737-7171-4953-AF98-45F1BE7AF09E@sigsegv.be>
next in thread | previous in thread | raw e-mail | index | archive | help
Kristof Provost <kristof@sigsegv.be> wrote > On 21 Dec 2017, at 21:50, Michael Grimm wrote: >> Kristof Provost <kristof@sigsegv.be> wrote: >>> Can you try turning off TSO? (`ifconfig $ifname -tso`) >>>=20 >>> There have been issues with pf and TSO checksums, which looked a lot = like this (i.e. bad TCP performance). Those problems should be fixed, = but this is easy to test. >> I did try it, but without success. > Hmm. I=E2=80=99ve got no ideas at the moment. I run a very similar = setup (although on CURRENT), and see no performance issues from my = jails. > Can you test a performance test without pf? Perhaps from the local LAN = for example? That should help narrow it down a bit, at least. Well I prepared on of my webservers running at hostB/jailX to serve a = sample file for local downloading tests: 1) hostA wget from hostB/jailX sample file: about 30 MB/s 2) hostA/jailY wget from hostB/jailX sample file: about 30 MB/s 3) hostB wget from hostB/jailX sample file: about 190 MB/s 4) hostB/jailY wget from hostB/jailX sample file: about 190 MB/s Hmm. At least tests 3) and 4) omit the pf firewall. Tests 1) qnd 2) = include passing two firewalls, one at each host. BUT: Both hosts are = connected via an IPSec tunnel, and that's esp not tcp. Can anyone draw conclusions from this test?=20 I cannot ;-) Thanks and regards, Michael
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?BE008733-5AD8-4DAC-A6A5-BC3FCEC16202>