From owner-freebsd-performance@FreeBSD.ORG Thu May 26 18:44:36 2005 Return-Path: X-Original-To: freebsd-performance@freebsd.org Delivered-To: freebsd-performance@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 820CB16A41C for ; Thu, 26 May 2005 18:44:36 +0000 (GMT) (envelope-from cswiger@mac.com) Received: from smtpout.mac.com (smtpout.mac.com [17.250.248.97]) by mx1.FreeBSD.org (Postfix) with ESMTP id 51DF543D1F for ; Thu, 26 May 2005 18:44:36 +0000 (GMT) (envelope-from cswiger@mac.com) Received: from mac.com (smtpin01-en2 [10.13.10.146]) by smtpout.mac.com (Xserve/8.12.11/smtpout06/MantshX 4.0) with ESMTP id j4QIiZtQ016040; Thu, 26 May 2005 11:44:35 -0700 (PDT) Received: from [192.168.1.6] (pool-68-161-53-96.ny325.east.verizon.net [68.161.53.96]) (authenticated bits=0) by mac.com (Xserve/smtpin01/MantshX 4.0) with ESMTP id j4QIiYL4001817; Thu, 26 May 2005 11:44:35 -0700 (PDT) In-Reply-To: <1117129668.42960bc4b751b@webmail.telus.net> References: <1117129668.42960bc4b751b@webmail.telus.net> Mime-Version: 1.0 (Apple Message framework v730) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: <9827650D-A61E-461A-85FC-A45413B42FEA@mac.com> Content-Transfer-Encoding: 7bit From: Charles Swiger Date: Thu, 26 May 2005 14:44:29 -0400 To: Peter Kieser X-Mailer: Apple Mail (2.730) Cc: freebsd-performance@freebsd.org Subject: Re: Performance/lockup issues with FreeBSD as a router X-BeenThere: freebsd-performance@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Performance/tuning List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 26 May 2005 18:44:36 -0000 On May 26, 2005, at 1:47 PM, Peter Kieser wrote: > The nics are if_dc, this is a stock FreeBSD 5.4-RELEASE > installation (no > firewall or anything): > > Here's my /etc/sysctl.conf: > > net.inet.ip.rtexpire=1800 > net.inet.ip.rtminexpire=1800 > kern.maxfiles=32768 > kern.maxfilesperproc=32768 > kern.ipc.somaxconn=32767 > net.inet.tcp.sendspace=256000 > net.inet.tcp.recvspace=256000 > kern.ipc.maxsockbuf=2097152 > net.inet.ip.fastforwarding=1 > net.inet.tcp.rfc1323=1 > net.link.ether.inet.max_age=600 > net.inet.tcp.msl=7500 > net.inet.ip.fw.dyn_udp_lifetime=10 > net.inet.ip.fw.dyn_buckets=1024 > > And here's my /boot/loader.conf: > > kern.ipc.maxsockets="163840" > kern.maxusers="2048" > > Is there anythign I'm overlooking that would be causing the machine > to lockup > like this? Your settings are tuned so high that you may be running out of KVA memory. I bet the system would be happier if you let maxusers autotune itself (and then maybe adjust it by a factor of 2 from there), and if you reduced kern.maxfilesperproc to 2048 or less, and reduced the TCP sendspace to 65K. [ As a last resort, you might even try nixing the fastforwarding option. It's well-suited for your task, and you do want it on if it is working right, but maybe try running without it for a test. ] -- -Chuck