From owner-freebsd-stable@FreeBSD.ORG Mon Mar 16 13:21:02 2015 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 92F93398 for ; Mon, 16 Mar 2015 13:21:02 +0000 (UTC) Received: from gold.funkthat.com (gate2.funkthat.com [208.87.223.18]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "gold.funkthat.com", Issuer "gold.funkthat.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 53C28E5C for ; Mon, 16 Mar 2015 13:21:02 +0000 (UTC) Received: from gold.funkthat.com (localhost [127.0.0.1]) by gold.funkthat.com (8.14.5/8.14.5) with ESMTP id t2GDKtm0019066 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 16 Mar 2015 06:20:56 -0700 (PDT) (envelope-from jmg@gold.funkthat.com) Received: (from jmg@localhost) by gold.funkthat.com (8.14.5/8.14.5/Submit) id t2GDKtG6019065; Mon, 16 Mar 2015 06:20:55 -0700 (PDT) (envelope-from jmg) Date: Mon, 16 Mar 2015 06:20:55 -0700 From: John-Mark Gurney To: Mike Tancsa Subject: Re: 35-40% performance drop releng9 vs releng10 openvpn Message-ID: <20150316132055.GQ32288@funkthat.com> References: <5506250A.2000506@sentex.net> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <5506250A.2000506@sentex.net> X-Operating-System: FreeBSD 9.1-PRERELEASE amd64 X-PGP-Fingerprint: 54BA 873B 6515 3F10 9E88 9322 9CB1 8F74 6D3F A396 X-Files: The truth is out there X-URL: http://resnet.uoregon.edu/~gurney_j/ X-Resume: http://resnet.uoregon.edu/~gurney_j/resume.html X-TipJar: bitcoin:13Qmb6AeTgQecazTWph4XasEsP7nGRbAPE X-to-the-FBI-CIA-and-NSA: HI! HOW YA DOIN? can i haz chizburger? User-Agent: Mutt/1.5.21 (2010-09-15) X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.2.7 (gold.funkthat.com [127.0.0.1]); Mon, 16 Mar 2015 06:20:56 -0700 (PDT) Cc: FreeBSD-STABLE Mailing List X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Mar 2015 13:21:02 -0000 Mike Tancsa wrote this message on Sun, Mar 15, 2015 at 20:34 -0400: > As part of moving from a RELENG8 based image to a RELENG9 or 10, I was > doing some simple performance testing and found RELENG_9 to be quite a > bit faster when generating traffic through a pcengines APU (dual core, > AMD64, 2G of RAM). Both are using generic kernels > > blasting across an aes-128cbc tunnel, on releng9 I get > > > # dd if=/dev/zero | nc 10.3.24.25 500 > > 326002688 bytes transferred in 37.188139 secs (8766308 bytes/sec) > > > vs > > # dd if=/dev/zero | nc 10.3.24.25 500 > 146982400 bytes transferred in 27.750440 secs (5296579 bytes/sec) > on releng10. > > Both have identical pf rules, but disabling pf does not make much of a > difference in speed. > > I havent started checking any of the default tunables. The box will be > functioning as a VPN router and I was hoping to get at least 50Mb/s out > of it, and I can do that on RELENG9, but not 10. > Any ideas what to do with RELENG10 to get comparable performance out of it ? Since you have at test framework ready, you could generate some flame graphs[1] using dtrace to help see where things might be having an impact... These are very easy to generate, and posting them would be useful... [1] http://www.brendangregg.com/FlameGraphs/cpuflamegraphs.html -- John-Mark Gurney Voice: +1 415 225 5579 "All that I will do, has been done, All that I have, has not."