From owner-freebsd-current@FreeBSD.ORG Tue Mar 30 17:29:32 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C65EB16A4CE; Tue, 30 Mar 2004 17:29:32 -0800 (PST) Received: from fledge.watson.org (fledge.watson.org [204.156.12.50]) by mx1.FreeBSD.org (Postfix) with ESMTP id 51D7043D3F; Tue, 30 Mar 2004 17:29:32 -0800 (PST) (envelope-from robert@fledge.watson.org) Received: from fledge.watson.org (localhost [127.0.0.1]) by fledge.watson.org (8.12.10/8.12.10) with ESMTP id i2V1R5xC003047; Tue, 30 Mar 2004 20:27:05 -0500 (EST) (envelope-from robert@fledge.watson.org) Received: from localhost (robert@localhost)i2V1R4hK003044; Tue, 30 Mar 2004 20:27:04 -0500 (EST) (envelope-from robert@fledge.watson.org) Date: Tue, 30 Mar 2004 20:27:04 -0500 (EST) From: Robert Watson X-Sender: robert@fledge.watson.org To: Dag-Erling =?iso-8859-1?q?Sm=F8rgrav?= In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=ISO-8859-1 Content-Transfer-Encoding: QUOTED-PRINTABLE cc: Pawel Jakub Dawidek cc: current@FreeBSD.org Subject: Re: performance of jailed processes X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Mar 2004 01:29:32 -0000 On Wed, 31 Mar 2004, Dag-Erling Sm=F8rgrav wrote: > Robert Watson writes: > > I'd be very interested in knowing if changing your application to bind > > alternative IP addresses rather than using jail to force the binding to= an > > alternative address changes the performance results. I.e., are we look= ing > > at a problem with additional aliases and not a problem with jail at all= =2E.. >=20 > I reproduced the problem with scp, then threw in -oBindAddress=3Dfoo. It > seems you're on to something; running it outside any jail but bound to > one of the aliases gave the same symptoms as running it from inside a > jail.=20 Are your aliases configured on lo0, or on the ethernet interface? Could we see some excerpted ifconfig output for your interface (perhaps only ten -- first five, last five of the 2000+ IP addresses :-).=20 Robert N M Watson FreeBSD Core Team, TrustedBSD Projects robert@fledge.watson.org Senior Research Scientist, McAfee Research