From owner-freebsd-net@FreeBSD.ORG Fri Feb 10 23:01:08 2006 Return-Path: X-Original-To: freebsd-net@freebsd.org Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 291F116A420 for ; Fri, 10 Feb 2006 23:01:08 +0000 (GMT) (envelope-from max@love2party.net) Received: from moutng.kundenserver.de (moutng.kundenserver.de [212.227.126.187]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7FB4B43D48 for ; Fri, 10 Feb 2006 23:01:07 +0000 (GMT) (envelope-from max@love2party.net) Received: from [84.163.233.94] (helo=amd64.laiers.local) by mrelayeu.kundenserver.de (node=mrelayeu4) with ESMTP (Nemesis), id 0ML21M-1F7hG80B4Z-00070m; Sat, 11 Feb 2006 00:01:01 +0100 From: Max Laier Organization: FreeBSD To: freebsd-net@freebsd.org Date: Sat, 11 Feb 2006 00:02:12 +0100 User-Agent: KMail/1.9.1 References: <7bb8f24157080b6aaacb897a99259df9@madhaus.cns.utoronto.ca> <711b7ec873f31bc5be50ce477313fac3@madhaus.cns.utoronto.ca> <43ECEF7C.2090101@elischer.org> In-Reply-To: <43ECEF7C.2090101@elischer.org> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart142454074.3HhXPCN98c"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit Message-Id: <200602110002.21275.max@love2party.net> X-Provags-ID: kundenserver.de abuse@kundenserver.de login:61c499deaeeba3ba5be80f48ecc83056 Cc: Marcos Bedinelli , Julian Elischer Subject: Re: Network performance in a dual CPU system X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Feb 2006 23:01:08 -0000 --nextPart142454074.3HhXPCN98c Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On Friday 10 February 2006 20:54, Julian Elischer wrote: > Marcos Bedinelli wrote: > > Hello all, > > > > thanks for the replies. Most of you have suggested that I turn on > > polling and give it a try. The machine is in production, hence I need > > to schedule downtime for that. > > > > The system is mainly being used as a dedicated router. It runs OSPF, > > BGP and IPFW (around 150 rules). OSPF and BGP are managed by Quagga. > > The box has 2 gigabit interfaces that handle on average 200Mbp/s - 50K > > packets/s (inbound and outbound combined), each one of them. > > I have found that most people can optimise there ipfw rulests considerabl= y. > > for example: a first rule of: > 1 allow ip from any to any in recv {inside interfacfe} > 2 allow ip from any to any out xmit {inside interface} > will cut your ipfw load by 50% immediatly. > (you should only be filterring on one interface usually) > > use 'skipto' rules to immediatly send incoming and outgoing data to > different rules sets. =46WIW, pf does some of those optimizations automatically called "skip step= s"=20 and "pfctl -o" restructures the ruleset so that often matching rules are=20 moved to the top. I know that this does not map directly to IPFW, but it=20 might still be interesting to have a look at it. > etc. > (I you want to privatly send me your ruleset I can probably help you do > this) > > julian > > > Some of you have asked for the following information: > > > > > > - As I indicated before, polling is currently disabled. > > > > > > - Hyperthreading (HTT) is disabled. > > > > > > mull [~]$vmstat -i > > interrupt total rate > > irq1: atkbd0 3466 0 > > irq6: fdc0 10 0 > > irq13: npx0 1 0 > > irq14: ata0 47 0 > > irq21: fxp1 20462527 8 > > irq28: bge0 3511765157 1444 > > irq29: bge1 3633124373 1494 > > irq30: aac0 1842472 0 > > cpu0: timer 566751007 233 > > Total 7733949060 3181 > > > > > > mull [~]$netstat -m > > 644/646/1290 mbufs in use (current/cache/total) > > 643/407/1050/17088 mbuf clusters in use (current/cache/total/max) > > 0/5/4528 sfbufs in use (current/peak/max) > > 1447K/975K/2422K bytes allocated to network (current/cache/total) > > 0 requests for sfbufs denied > > 0 requests for sfbufs delayed > > 0 requests for I/O initiated by sendfile > > 0 calls to protocol drain routines > > > > > > > > Thank you, > > > > -- > > Marcos > > > > _______________________________________________ > > freebsd-net@freebsd.org mailing list > > http://lists.freebsd.org/mailman/listinfo/freebsd-net > > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" > > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" =2D-=20 /"\ Best regards, | mlaier@freebsd.org \ / Max Laier | ICQ #67774661 X http://pf4freebsd.love2party.net/ | mlaier@EFnet / \ ASCII Ribbon Campaign | Against HTML Mail and News --nextPart142454074.3HhXPCN98c Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (FreeBSD) iD8DBQBD7Rt9XyyEoT62BG0RAo8/AJ9BPfGdS7cT+ZOdEaXJvHsUh7gNKQCePW68 4d9JPOO7fqXbS9qdzD6SNec= =kNJT -----END PGP SIGNATURE----- --nextPart142454074.3HhXPCN98c--