From owner-freebsd-questions@FreeBSD.ORG Thu Sep 16 06:34:24 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 498CC16A4CE for ; Thu, 16 Sep 2004 06:34:24 +0000 (GMT) Received: from nightmare.dreamchaser.org (nightmare.dreamchaser.org [12.32.36.65]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9547C43D46 for ; Thu, 16 Sep 2004 06:34:23 +0000 (GMT) (envelope-from garya@dreamchaser.org) Received: from [12.32.36.74] (imagination.dreamchaser.org. [12.32.36.74]) i8G6YMda001077 for ; Thu, 16 Sep 2004 00:34:22 -0600 (MDT) (envelope-from garya@dreamchaser.org) Message-ID: <414933EF.2050404@dreamchaser.org> Date: Thu, 16 Sep 2004 00:34:23 -0600 From: Gary Aitken User-Agent: Mozilla Thunderbird 0.7.3 (Windows/20040803) X-Accept-Language: en-us, en MIME-Version: 1.0 To: FreeBSD Questions Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Subject: packet pass through vs ftp -- performance weirdity X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Sep 2004 06:34:24 -0000 I'm seeing some weird network performance I don't understand. If I sit at an NT box and using a web browser, go through my fbsd 4.10 firewall to someplace out in the world through a slow dsl connection, I get download speeds of 20KB - 45KB/sec, pretty much the max my DSL connection can deliver. The nt box is connected to the fbsd box over a 10Mb/sec full duplex crossover cable for test purposes. If I ftp (shell window) or use a browser to ftp from the fbsd box itself, I see a max speed of something like 8KB/sec. This makes absolutely no sense to me, given the relative speeds of the network connections, which I would have thought was the limiting factor. The fbsd box is a p200, 128M, single 7200rpm 9.4ms seagate ultra scsi drive, 10MB/sec negotiated xfr rate. Data used for testing was ~8MB file in /var partition, don't know how badly fragmented. Is passing packets through the firewall and ipfw rules that much faster than an ftp access? Ideas for where to look for what's slowing things down? Thanks, Gary