Date: Thu, 28 Jun 2012 16:35:50 +0400 From: Gleb Smirnoff <glebius@FreeBSD.org> To: pf@FreeBSD.org Subject: Re: [CFT] SMP-friendly pf Message-ID: <20120628123550.GF21957@FreeBSD.org> In-Reply-To: <20120608061737.GA28197@glebius.int.ru> References: <20120608061737.GA28197@glebius.int.ru>
next in thread | previous in thread | raw e-mail | index | archive | help
Hello, again. On Fri, Jun 08, 2012 at 10:17:37AM +0400, Gleb Smirnoff wrote: T> Three and a half months ago I've started on a project "SMP-friendly pf", T> which recently have entered alpha stage. As you see from the subject of this T> mail, this is call for testing. I'm bit disappointed that my announce get so little response. Anyway, here are some results from running in production. This time on a busy router, that got a noticable load during busiest hours. It has complex ruleset with almost 400 rules, 21 vlan(4) interfaces running on top of lagg(4) and serves about 30 subnets of different size. Some subnets are behind NAT, and some or simple routed. The router usually got somewhere between 20k to 60k states and 120k pf searches per second, with peaks up to 140k searches. It has 4 cores and runs igb(4) NICs. After migrating to experimental pf branch on, the CPU load during busiest hours has dropped significantly: http://people.freebsd.org/~glebius/pflock/pflock-migration.png A more recent pic (taken right now): http://people.freebsd.org/~glebius/pflock/pflock-migration2.png Each high peak is a working day (in Russia in June we have had a 6 day week followed by 3 day week). The thin red peak is buildworld+buildkernel, and after it the box was rebooted and since runs with SMP-friendly pf. As you may notice, after migration the working day peaks are much lower than before. Traffic volume is the same, I've checked this :) I hope these results would encourage someone to participate in early testing. :) -- Totus tuus, Glebius.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20120628123550.GF21957>