Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 11 Feb 2006 00:02:12 +0100
From:      Max Laier <max@love2party.net>
To:        freebsd-net@freebsd.org
Cc:        Marcos Bedinelli <bedinelli@madhaus.cns.utoronto.ca>, Julian Elischer <julian@elischer.org>
Subject:   Re: Network performance in a dual CPU system
Message-ID:  <200602110002.21275.max@love2party.net>
In-Reply-To: <43ECEF7C.2090101@elischer.org>
References:  <7bb8f24157080b6aaacb897a99259df9@madhaus.cns.utoronto.ca> <711b7ec873f31bc5be50ce477313fac3@madhaus.cns.utoronto.ca> <43ECEF7C.2090101@elischer.org>

next in thread | previous in thread | raw e-mail | index | archive | help
--nextPart142454074.3HhXPCN98c
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

On Friday 10 February 2006 20:54, Julian Elischer wrote:
> Marcos Bedinelli wrote:
> > Hello all,
> >
> > thanks for the replies. Most of you have suggested that I turn on
> > polling and give it a try. The machine is in production, hence I need
> > to schedule downtime for that.
> >
> > The system is mainly being used as a dedicated router. It runs OSPF,
> > BGP and IPFW (around 150 rules). OSPF and BGP are managed by Quagga.
> > The box has 2 gigabit interfaces that handle on average 200Mbp/s - 50K
> > packets/s (inbound and outbound combined), each one of them.
>
> I have found that most people can optimise there ipfw rulests considerabl=
y.
>
> for example: a first rule of:
> 1 allow ip from any to any in recv {inside interfacfe}
> 2 allow ip from any to any out xmit {inside interface}
> will cut your ipfw load by 50% immediatly.
> (you should only be filterring on one interface usually)
>
> use 'skipto' rules to immediatly send incoming and outgoing data to
> different rules sets.

=46WIW, pf does some of those optimizations automatically called "skip step=
s"=20
and "pfctl -o" restructures the ruleset so that often matching rules are=20
moved to the top.  I know that this does not map directly to IPFW, but it=20
might still be interesting to have a look at it.

> etc.
> (I you want to privatly send me your ruleset I can probably help you do
> this)
>
> julian
>
> > Some of you have asked for the following information:
> >
> >
> > - As I indicated before, polling is currently disabled.
> >
> >
> > - Hyperthreading (HTT) is disabled.
> >
> >
> > mull [~]$vmstat -i
> > interrupt                          total       rate
> > irq1: atkbd0                        3466          0
> > irq6: fdc0                            10          0
> > irq13: npx0                            1          0
> > irq14: ata0                           47          0
> > irq21: fxp1                     20462527          8
> > irq28: bge0                   3511765157       1444
> > irq29: bge1                   3633124373       1494
> > irq30: aac0                      1842472          0
> > cpu0: timer                    566751007        233
> > Total                         7733949060       3181
> >
> >
> > mull [~]$netstat -m
> > 644/646/1290 mbufs in use (current/cache/total)
> > 643/407/1050/17088 mbuf clusters in use (current/cache/total/max)
> > 0/5/4528 sfbufs in use (current/peak/max)
> > 1447K/975K/2422K bytes allocated to network (current/cache/total)
> > 0 requests for sfbufs denied
> > 0 requests for sfbufs delayed
> > 0 requests for I/O initiated by sendfile
> > 0 calls to protocol drain routines
> >
> >
> >
> > Thank you,
> >
> > --
> > Marcos
> >
> > _______________________________________________
> > freebsd-net@freebsd.org mailing list
> > http://lists.freebsd.org/mailman/listinfo/freebsd-net
> > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
>
> _______________________________________________
> freebsd-net@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"

=2D-=20
/"\  Best regards,                      | mlaier@freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier@EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News

--nextPart142454074.3HhXPCN98c
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (FreeBSD)

iD8DBQBD7Rt9XyyEoT62BG0RAo8/AJ9BPfGdS7cT+ZOdEaXJvHsUh7gNKQCePW68
4d9JPOO7fqXbS9qdzD6SNec=
=kNJT
-----END PGP SIGNATURE-----

--nextPart142454074.3HhXPCN98c--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200602110002.21275.max>