From owner-freebsd-current@FreeBSD.ORG Fri Aug 5 00:03:57 2011 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 67077106564A for ; Fri, 5 Aug 2011 00:03:57 +0000 (UTC) (envelope-from victordetoni@gmail.com) Received: from mail-qy0-f175.google.com (mail-qy0-f175.google.com [209.85.216.175]) by mx1.freebsd.org (Postfix) with ESMTP id 2B2E68FC12 for ; Fri, 5 Aug 2011 00:03:56 +0000 (UTC) Received: by qyk4 with SMTP id 4so18401qyk.13 for ; Thu, 04 Aug 2011 17:03:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; bh=NjL+pt3NWfMkjbvRuQYymLJ7vjQsmM4jrq4D9fbm4gk=; b=JpqCUO9/Z/oVxPtO4v37s2y6NOPZocknrnU8Fpv5ls496Yw+/Kqy/8wnWnK1ULd6Zo hixU7GGQ6qKcSSD5/N5nekkdMUuSzRuHyGJHJCkE7WTIEeRH5IeVswvkuVxyliZqhJhh v74/ri00HAV85bdgJZLulS4+ouZRMAkLqE0Ro= MIME-Version: 1.0 Received: by 10.229.52.76 with SMTP id h12mr1204111qcg.73.1312501157462; Thu, 04 Aug 2011 16:39:17 -0700 (PDT) Received: by 10.229.81.213 with HTTP; Thu, 4 Aug 2011 16:39:17 -0700 (PDT) Date: Thu, 4 Aug 2011 20:39:17 -0300 Message-ID: From: Victor Detoni To: freebsd-current@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: High Network Perfomance X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Aug 2011 00:03:57 -0000 Hi Guys, I'm trying tunning a FreeBSD 8.2 to high perfomance network with pf. My server configuration is: Dell 1950 CPU: Intel(R) Xeon(R) CPU 5130 @ 2.00GHz (1995.03-MHz K8-class CPU) 4 x CPU 2 NIC () I want to reach the high processing of packets per second and use pf as synproxy and we still processor to handle others packets or flows. I know that em drivers has MULTI_QUEUE implementation that helps high performance for Intel drivers, but I couldn't see more information about. We can reached 500k pps, but no more traffic was processed by this interface. I've already enabled net.isr.direct but with Intel Drivers does not work and the most processors are in System instead of Interrupts, why? When I enable net.isr.direct the processing is balanced for on CPU in system and another in interrupt and I reached 1M pps, but the total perfomance is down, the load grow up too fast. I've changed some parameter in sysctl for intel drivers, but it doesn't have effect. Someone know what I can do to reach more packets performance? I want to use this FreeBSD as a router/firewall only. Thanks, Victor