From owner-freebsd-questions@FreeBSD.ORG Thu Mar 10 06:25:30 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A36C516A4CE for ; Thu, 10 Mar 2005 06:25:30 +0000 (GMT) Received: from skipjack.no-such-agency.net (skipjack.no-such-agency.net [64.142.114.146]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3ADB643D3F for ; Thu, 10 Mar 2005 06:25:30 +0000 (GMT) (envelope-from jpp@cloudview.com) Received: from skipjack.no-such-agency.net (localhost [127.0.0.1]) by skipjack.no-such-agency.net (Postfix) with ESMTP id DB56534D44D; Wed, 9 Mar 2005 22:25:29 -0800 (PST) Received: from [192.168.2.120] (blackhole.no-such-agency.net [64.142.103.196]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by skipjack.no-such-agency.net (Postfix) with ESMTP id 89E8634D453; Wed, 9 Mar 2005 22:25:29 -0800 (PST) Message-ID: <422FE859.4090802@cloudview.com> Date: Wed, 09 Mar 2005 22:25:29 -0800 From: John Pettitt Organization: CloudView Photographic User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Bhaban Singh References: <5bf72245050309221670464a9@mail.gmail.com> In-Reply-To: <5bf72245050309221670464a9@mail.gmail.com> X-Enigmail-Version: 0.90.1.1 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-AV-Checked: by skipjack cc: freebsd-questions@FreeBSD.org Subject: Re: Regarding Network Performance X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Mar 2005 06:25:30 -0000 Bhaban Singh wrote: >I test the network performance in two system using iperf and netperf i >Gigabit LAN. >my system configuration is > >node A : Intel Xeon Dual Processor (2.8 GHz) with 2 GB RAM >node B : Intel Pentium III Dual Processor (1.2 GHz) with 1 GB RAM > >i get only > >552 Mbps (before implementing IPsec) >45.5 Mbps (after implementing IPSEC) > >why the throughput is so low. please suggest me. > >regards >bhaban >_______________________________________________ > > > There could be a lot of reasons but I'd start with node B - what bus does it have? If you have your LAN card on a 32bit PCI bus it's going to max at a theoretical 133MB/sec but in practice if you get half that you're doing well (66MB/sec == 528Mbps). Ditto on the ipsec- run 'systat -vmstat 1' on both boxes while you run the test - I suspect your PIIII box is totally swamped by the load of encryption. Also if you enable ipsec you lose the mpsafe network stack (at least on 5.3 release) so you take a performance hit there too. John