Date: Sat, 13 Jan 2007 10:54:13 +1100 From: Antony Mawer <fbsd-performance@mawer.org> To: Patrick Proniewski <patpro@patpro.net> Cc: Lucas Holt <luke@foolishgames.com>, freebsd-performance@freebsd.org Subject: Re: network perf : em driver ? Message-ID: <45A81FA5.3090701@mawer.org> In-Reply-To: <7CA8AE1A-3925-404C-9F69-32AC4FFBB379@patpro.net> References: <CB7DCA86-1D28-4B8E-AFA9-E7BB577FCCA6@patpro.net> <AA6F584E-A1F9-4B23-98DA-8538B85CA1DB@foolishgames.com> <7CA8AE1A-3925-404C-9F69-32AC4FFBB379@patpro.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On 13/01/2007 10:08 AM, Patrick Proniewski wrote: > the FreeBSD has 1 GB DDR2 ECC, 2 250GB SATA II HDD (but motherboard > controler is on SATA I) and uses pf: > > # pfctl -s all > TRANSLATION RULES: > nat on fxp0 inet from 192.168.0.0/24 to any -> (fxp0) round-robin > > FILTER RULES: > scrub in all fragment reassemble > block return all > block return in log quick proto tcp from <sshscan> to any port = ssh > pass quick on lo0 all > [ bunch of block in/out and pass in rules applying only on fxp0, the > external IF ] > pass in inet proto icmp all icmp-type echoreq keep state > pass in on em0 inet from 192.168.0.0/24 to any keep state > pass out on em0 inet from any to 192.168.0.0/24 keep state > [ few pass out rules applying only on fxp0, the external IF ] > No queue in use Does disabling pf/clearing out the rules make any difference to the speeds you can achieve? In particular I'm not sure what the performance impact of the "scrub in all" might be. Certainly worth a quick test! --Antony
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?45A81FA5.3090701>