Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 10 Feb 2006 11:54:36 -0800
From:      Julian Elischer <julian@elischer.org>
To:        Marcos Bedinelli <bedinelli@madhaus.cns.utoronto.ca>
Cc:        freebsd-net@freebsd.org
Subject:   Re: Network performance in a dual CPU system
Message-ID:  <43ECEF7C.2090101@elischer.org>
In-Reply-To: <711b7ec873f31bc5be50ce477313fac3@madhaus.cns.utoronto.ca>
References:  <7bb8f24157080b6aaacb897a99259df9@madhaus.cns.utoronto.ca>	<43ECB1E7.8010308@mac.com> <711b7ec873f31bc5be50ce477313fac3@madhaus.cns.utoronto.ca>

next in thread | previous in thread | raw e-mail | index | archive | help
Marcos Bedinelli wrote:

> Hello all,
>
> thanks for the replies. Most of you have suggested that I turn on 
> polling and give it a try. The machine is in production, hence I need 
> to schedule downtime for that.
>
> The system is mainly being used as a dedicated router. It runs OSPF, 
> BGP and IPFW (around 150 rules). OSPF and BGP are managed by Quagga. 
> The box has 2 gigabit interfaces that handle on average 200Mbp/s - 50K 
> packets/s (inbound and outbound combined), each one of them.


I have found that most people can optimise there ipfw rulests considerably.

for example: a first rule of:
1 allow ip from any to any in recv {inside interfacfe}
2 allow ip from any to any out xmit {inside interface}
will cut your ipfw load by 50% immediatly.
(you should only be filterring on one interface usually)

use 'skipto' rules to immediatly send incoming and outgoing data to 
different rules sets.

etc.
(I you want to privatly send me your ruleset I can probably help you do 
this)

julian



>
>
> Some of you have asked for the following information:
>
>
> - As I indicated before, polling is currently disabled.
>
>
> - Hyperthreading (HTT) is disabled.
>
>
> mull [~]$vmstat -i
> interrupt                          total       rate
> irq1: atkbd0                        3466          0
> irq6: fdc0                            10          0
> irq13: npx0                            1          0
> irq14: ata0                           47          0
> irq21: fxp1                     20462527          8
> irq28: bge0                   3511765157       1444
> irq29: bge1                   3633124373       1494
> irq30: aac0                      1842472          0
> cpu0: timer                    566751007        233
> Total                         7733949060       3181
>
>
> mull [~]$netstat -m
> 644/646/1290 mbufs in use (current/cache/total)
> 643/407/1050/17088 mbuf clusters in use (current/cache/total/max)
> 0/5/4528 sfbufs in use (current/peak/max)
> 1447K/975K/2422K bytes allocated to network (current/cache/total)
> 0 requests for sfbufs denied
> 0 requests for sfbufs delayed
> 0 requests for I/O initiated by sendfile
> 0 calls to protocol drain routines
>
>
>
> Thank you,
>
> -- 
> Marcos
>
> _______________________________________________
> freebsd-net@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?43ECEF7C.2090101>