From owner-freebsd-net@FreeBSD.ORG Thu Aug 30 09:12:09 2012 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 6FE57106566C for ; Thu, 30 Aug 2012 09:12:09 +0000 (UTC) (envelope-from lev@FreeBSD.org) Received: from onlyone.friendlyhosting.spb.ru (onlyone.friendlyhosting.spb.ru [46.4.40.135]) by mx1.freebsd.org (Postfix) with ESMTP id 279998FC22 for ; Thu, 30 Aug 2012 09:12:08 +0000 (UTC) Received: from lion.home.serebryakov.spb.ru (unknown [IPv6:2001:470:923f:1:b893:d73f:3750:2064]) (Authenticated sender: lev@serebryakov.spb.ru) by onlyone.friendlyhosting.spb.ru (Postfix) with ESMTPA id ED2644AC2D; Thu, 30 Aug 2012 13:12:01 +0400 (MSK) Date: Thu, 30 Aug 2012 13:11:58 +0400 From: Lev Serebryakov Organization: FreeBSD Project X-Priority: 3 (Normal) Message-ID: <534292400.20120830131158@serebryakov.spb.ru> To: Ian Smith In-Reply-To: <20120830152726.A33776@sola.nimnet.asn.au> References: <1865271844.20120829131610@serebryakov.spb.ru> <1807373989.20120829223125@serebryakov.spb.ru> <20120830152726.A33776@sola.nimnet.asn.au> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Cc: freebsd-net@freebsd.org Subject: Bad routing performance on 500Mhz Geode LX with CURRENT, ipfw and mpd5 (was: ipfw, "ip|all" proto and PPPoE -- does PPPoE packets passed to ipfw?) X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: lev@FreeBSD.org List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Aug 2012 09:12:09 -0000 Hello, Ian. You wrote 30 =D0=B0=D0=B2=D0=B3=D1=83=D1=81=D1=82=D0=B0 2012 =D0=B3., 10:23= :56: >> Yep, I'll collapse my two-rule chains in one rule. IS> I guess if the issue persists, we may need to see more of your ruleset. Not a problem at all, here it is: http://lev.serebryakov.spb.ru/_sklad/firewall.ipfw IS> Hmm, you shouldn't see ANY pppoe traffic on ng0, only on the interface IS> mpd5 uses to connect with your DSL modem/bridge. Nor would you expect Yep. I didn't see it. My question is, really: why vr1 (my physical interface, used to connect to my ISP) takes 50%+ of CPU when traffic is only 40mbit/s down and about 20mbit/s up (with many connections)? I was afraid, that all PPPoE traffic is inspected by ipfw and it causes additional CPU load. Yes, it is only 500Mhz Geode LX, but it is only 40 mbit/s and 4.5Kpps in both directions, nothing like full 100Mbit or more, and I've learned "empirical" rule/heuristics about 1Gbit(!) per 1Ghz(!) for softrouters, So, theoretically, 40mbit should not be a problem at all for this hardware. And now I have not-working WiFi (this box is also AP) when wired traffic is high (wifi speed drops down to 100KB/s from 2.5-3MB/s without wired traffic), userland freezes under load (very bad with ULE, better with 4BSD), and inability to pass through 40Mbit in both directions simultaneously. --=20 // Black Lion AKA Lev Serebryakov