From owner-freebsd-current@FreeBSD.ORG Sun Aug 7 13:14:58 2011 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 5AEA6106564A for ; Sun, 7 Aug 2011 13:14:58 +0000 (UTC) (envelope-from slw@zxy.spb.ru) Received: from zxy.spb.ru (zxy.spb.ru [195.70.199.98]) by mx1.freebsd.org (Postfix) with ESMTP id B7FFD8FC08 for ; Sun, 7 Aug 2011 13:14:57 +0000 (UTC) Received: from slw by zxy.spb.ru with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1Qq2Xn-0001xO-Hv; Sun, 07 Aug 2011 16:33:27 +0400 Date: Sun, 7 Aug 2011 16:33:27 +0400 From: Slawa Olhovchenkov To: Victor Detoni Message-ID: <20110807123327.GA26983@zxy.spb.ru> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.20 (2009-06-14) X-SA-Exim-Connect-IP: X-SA-Exim-Mail-From: slw@zxy.spb.ru X-SA-Exim-Scanned: No (on zxy.spb.ru); SAEximRunCond expanded to false Cc: freebsd-current@freebsd.org Subject: Re: High Network Perfomance X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Aug 2011 13:14:58 -0000 On Thu, Aug 04, 2011 at 08:39:17PM -0300, Victor Detoni wrote: > Hi Guys, > > I'm trying tunning a FreeBSD 8.2 to high perfomance network with pf. My > server configuration is: > > Dell 1950 > CPU: Intel(R) Xeon(R) CPU 5130 @ 2.00GHz (1995.03-MHz K8-class > CPU) > 4 x CPU > 2 NIC ( 1 NIC (em0: ) > > I want to reach the high processing of packets per second and use pf as > synproxy and we still processor to handle others packets or flows. > > I know that em drivers has MULTI_QUEUE implementation that helps high > performance for Intel drivers, but I couldn't see more information about. We > can reached 500k pps, but no more traffic was processed by this interface. > > I've already enabled net.isr.direct but with Intel Drivers does not work and > the most processors are in System instead of Interrupts, why? When I enable > net.isr.direct the processing is balanced for on CPU in system and another > in interrupt and I reached 1M pps, but the total perfomance is down, the > load grow up too fast. > > I've changed some parameter in sysctl for intel drivers, but it doesn't have > effect. > > Someone know what I can do to reach more packets performance? I want to use > this FreeBSD as a router/firewall only. FreeBSD (and em) need some tuning for high perfomance. Next links in russian, sorry. http://dadv.livejournal.com/138951.html http://dadv.livejournal.com/139170.html http://dadv.livejournal.com/139366.html -- Slawa Olhovchenkov