From owner-freebsd-net@FreeBSD.ORG Mon Apr 24 10:50:58 2006 Return-Path: X-Original-To: freebsd-net@freebsd.org Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B4E8C16A402 for ; Mon, 24 Apr 2006 10:50:58 +0000 (UTC) (envelope-from vladgalu@gmail.com) Received: from pproxy.gmail.com (pproxy.gmail.com [64.233.166.182]) by mx1.FreeBSD.org (Postfix) with ESMTP id 502C943D46 for ; Mon, 24 Apr 2006 10:50:58 +0000 (GMT) (envelope-from vladgalu@gmail.com) Received: by pproxy.gmail.com with SMTP id t32so975156pyc for ; Mon, 24 Apr 2006 03:50:57 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=ZWDL2+DRHOJx215pAGzL8LXbx33hVHZoKzjH4VkExGNoRODgWaofm4zL1T5WANa9ESPr0RhoLkukJe5FvSEQF72ec4HQH0ouYFvqyzHPxFav7NN9QPS45TYwm3D9E5WPwmpQe+Jm2az7FqcrMaryOsqlf/wNglBSnS7wAuhHTkw= Received: by 10.35.34.20 with SMTP id m20mr714209pyj; Mon, 24 Apr 2006 03:50:57 -0700 (PDT) Received: by 10.35.38.9 with HTTP; Mon, 24 Apr 2006 03:50:57 -0700 (PDT) Message-ID: <79722fad0604240350g602a175al59a926c9ddde9176@mail.gmail.com> Date: Mon, 24 Apr 2006 13:50:57 +0300 From: "Vlad GALU" To: freebsd-net@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Subject: requests for mbufs denied X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Apr 2006 10:50:58 -0000 The machine in question is a 6.1-RC. It serves a quite big number of clients (the lowest concurrency figures are around 2000, with peaks up to 9000). The in/out buffers for tcp sockets are 8K each. kern.ipc.nmbclusters is set to 327680. The firewall is pf, with the following limits: 131072 states and 262144 src-nodes. So more than generous limits. However, $subj statistics keep growing and growing. The machine has rebooted a few times, without dumping any core upon restart, although debugging support (both symbols and kgdb) is compiled in. Should I worry about the aforementioned stats ? If so, any idea of how to narrow the issue down ? I can't test much on the machine, unfortunately. P.S. I've the feeling that the growth rate of allocation failures went downhill since I removed the pfsync support, but it's just a feeling, I didn't measure it accurately. -- If it's there, and you can see it, it's real. If it's not there, and you can see it, it's virtual. If it's there, and you can't see it, it's transparent. If it's not there, and you can't see it, you erased it.