From owner-freebsd-isp@FreeBSD.ORG  Sat Feb 10 09:10:11 2007
Return-Path: <owner-freebsd-isp@FreeBSD.ORG>
X-Original-To: freebsd-isp@freebsd.org
Delivered-To: freebsd-isp@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id A2E9B16A40B
	for <freebsd-isp@freebsd.org>; Sat, 10 Feb 2007 09:10:11 +0000 (UTC)
	(envelope-from gedge-lists@yadn.org)
Received: from stretcher.cymru.serf.org
	(cpc2-cdif5-0-0-cust781.cdif.cable.ntl.com [81.109.159.14])
	by mx1.freebsd.org (Postfix) with ESMTP id 56A4513C494
	for <freebsd-isp@freebsd.org>; Sat, 10 Feb 2007 09:10:11 +0000 (UTC)
	(envelope-from gedge-lists@yadn.org)
Received: from gedge by stretcher.cymru.serf.org with local (Exim 4.66
	(FreeBSD)) (envelope-from <gedge-lists@yadn.org>)
	id 1HFnnC-000Box-0p; Sat, 10 Feb 2007 08:41:10 +0000
Date: Sat, 10 Feb 2007 08:41:10 +0000
From: Geraint Edwards <gedge-lists@yadn.org>
To: Justin Robertson <justin@sk1llz.net>
Message-ID: <20070210084110.GN30460@cymru.serf.org>
References: <45C7A713.2020201@sk1llz.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <45C7A713.2020201@sk1llz.net>
User-Agent: Mutt/1.4.2.2i
Organisation: Caerdydd, Cymru / Cardiff, Wales
X-MotD: Tempus fugit.
Cc: freebsd-isp@freebsd.org
Subject: Re: 6.x, 4.x ipfw/dummynet pf/altq - network performance issues
X-BeenThere: freebsd-isp@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Internet Services Providers <freebsd-isp.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-isp>,
	<mailto:freebsd-isp-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-isp>
List-Post: <mailto:freebsd-isp@freebsd.org>
List-Help: <mailto:freebsd-isp-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-isp>,
	<mailto:freebsd-isp-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 10 Feb 2007 09:10:11 -0000

Justin Robertson <justin@sk1llz.net> said
		(on Mon, Feb 05, 2007 at 01:52:19PM -0800):
>  6.x;
> Normal traffic isn't a problem. The second you get into the realm of 
> abusive traffic, such a DoS/DDoS (over 100mbps) UDP floods the machine 
> falls over. Little packets with ip lengths of 28-29 bytes seem to do the 
> most damage. I've tried playing with various sysctl values and have seen 
> no difference at all. By "falls over" I mean "stops sending all traffic 
> in any direction".

Just a thought (may not be related) but did you see 'known problems' at
	http://www.uk.freebsd.org/releases/6.2R/errata.html ?

-- 
Geraint A. Edwards (aka "Gedge")