From owner-freebsd-questions@FreeBSD.ORG Mon May 31 09:36:18 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B5FBC16A4CF for ; Mon, 31 May 2004 09:36:18 -0700 (PDT) Received: from calypso.bi.lt (calypso.bi.lt [213.226.153.10]) by mx1.FreeBSD.org (Postfix) with ESMTP id C15FD43D1D for ; Mon, 31 May 2004 09:36:15 -0700 (PDT) (envelope-from hugle@vkt.lt) Received: by calypso.bi.lt (Postfix, from userid 506) id 4B56A598246; Mon, 31 May 2004 19:36:09 +0300 (EEST) X-Original-To: freebsd-questions@freebsd.org Received: from vkt-dell (unknown [213.226.136.250]) by calypso.bi.lt (Postfix) with ESMTP id 39EA2598246; Mon, 31 May 2004 19:36:08 +0300 (EEST) Date: Mon, 31 May 2004 19:36:00 +0300 From: hugle Organization: VKT X-Priority: 3 (Normal) Message-ID: <8935715836.20040531193600@vkt.lt> To: Fernando Gleiser , freebsd-questions@freebsd.org In-Reply-To: <20040531121948.T84772-100000@cactus.fi.uba.ar> References: <1025899241.20040531165223@vkt.lt> <20040531121948.T84772-100000@cactus.fi.uba.ar> MIME-Version: 1.0 Content-Type: text/plain; charset=Windows-1251 Content-Transfer-Encoding: 8bit Subject: Re[2]: routing for 1000 users and 10Mbit internet. X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: hugle List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 31 May 2004 16:36:18 -0000 FG> On Mon, 31 May 2004, hugle wrote: >> The question in what machine do i need? >> What CPU and how much of ram ? FG> I set up a firewall for more than 300 users, a DMZ with a public webserver, FG> webmail and MX on a PII-350MHz with 128 MB RAM. dammit.. why then my users eats so much CPU? look: CPU states: 0.0% user, 0.0% nice, 0.8% system, 38.0% interrupt, 61.2% idle Mem: 21M Active, 177M Inact, 133M Wired, 1228K Cache, 199M Buf, 1677M Free I have only 61% idle ? usualy i have ~50 idle.. now I have P4 2.4GHZ maybe my setup is bad (kernel I mean)? ps. what those interrupt means? FG> On another client, I set up a firewall for 50 users with a Pentium 90MHz FG> with 64MB RAM. >> dual or single processor ? FG> One. Don't waste you money. A firewall isn't very CPU intensive. And given FG> the fact that ipf works at the IP stack level, I don't think you can have FG> more than one thread active at a time messing with the IP data structures. FG> Fer