From owner-freebsd-net@FreeBSD.ORG Thu Nov 22 12:38:40 2012 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 174207D5 for ; Thu, 22 Nov 2012 12:38:40 +0000 (UTC) (envelope-from marc@mpeters.org) Received: from mail.mpeters.org (mail.mpeters.org [78.46.104.142]) by mx1.freebsd.org (Postfix) with ESMTP id BE1308FC08 for ; Thu, 22 Nov 2012 12:38:39 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.mpeters.org (Postfix) with ESMTP id 9F572132013; Thu, 22 Nov 2012 13:38:38 +0100 (CET) X-Virus-Scanned: amavisd-new at mpeters.org Received: from mail.mpeters.org ([127.0.0.1]) by localhost (mail.mpeters.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I1mWz2-3bin4; Thu, 22 Nov 2012 13:38:37 +0100 (CET) Received: from [192.168.0.204] (unknown [62.159.86.18]) by mail.mpeters.org (Postfix) with ESMTPSA id 3362C13200E; Thu, 22 Nov 2012 13:38:36 +0100 (CET) Message-ID: <50AE1CCC.7080706@mpeters.org> Date: Thu, 22 Nov 2012 13:38:36 +0100 From: Marc Peters User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:16.0) Gecko/20121104 Thunderbird/16.0.1 MIME-Version: 1.0 To: Ingo Flaschberger Subject: Re: Low Bandwidth on intercontinental connections References: <50ACF62C.8000408@mpeters.org> <50ad087d.1892cc0a.2cce.3bf2@mx.google.com> <50AD1012.7020209@mpeters.org> <50AD14F8.8050001@xip.at> <50ADE5E4.9090708@mpeters.org> <50AE0B12.8000309@xip.at> In-Reply-To: <50AE0B12.8000309@xip.at> X-Enigmail-Version: 1.5a1pre Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: freebsd-net@freebsd.org X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Nov 2012 12:38:40 -0000 On 11/22/2012 12:22 PM, Ingo Flaschberger wrote: > >>> *) check and compare tcpdump >> for the FreeBSD hosts on the receiver side, it showed a lot of window >> size changes and from time to time a lot of duplicate ACKs. i will file >> a PR (as Adrian asked) and see to get a matching tcpdump and SIFTR >> output. > > *) can you check which ping-sizes work? > ping -s 1472 > ping -D -s 1472 (should work if you have a mtu of 1500 all over the > way) interesting, the MTU is way lower, than i expected. Through the VPN tunnel, only 1322 bytes are possible without fragmentation. ScreenOS adds 42 additional bytes per paket and the FreeBSD box is receiving 1364 bytes, according to tcpdump. From the outside (only one Netscreen on the way), 1472 is the maximum possible size to send pakets without fragmentation (-D). Which MTU would you suggest to use? Shouldn't the MTU discovery of FreeBSD handle this correct? > > *) any offloading/supported used at the network-card? Yes: bce0: flags=8843 metric 0 mtu 1500 options=c01bb ether ac:16:2d:b7:00:f4 inet 172.16.3.10 netmask 0xffffff00 broadcast 172.16.3.255 inet6 fe80::ae16:2dff:feb7:f4%bce0 prefixlen 64 scopeid 0x1 nd6 options=29 media: Ethernet autoselect (1000baseT ) status: active > *) try a rate-shaping queue outgoing (not really good - as shaping works > best on incomming interfaces): > you need dummynet (and ipfw for this example): > ipfw add pipe 1 all from .... > ipfw pipe 1 config bw 10Mbit/s queue 50Kbytes > (adjust queue size ~40ms at rated speed) no paketfiltering on the host itself is intended and i don't know anything of ipfw for a simple setup, sorry. marc > > Kind regards, > Ingo Flaschberger > > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"