From owner-freebsd-pf@FreeBSD.ORG Thu Jul 7 22:24:14 2011 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B3327106566B for ; Thu, 7 Jul 2011 22:24:14 +0000 (UTC) (envelope-from Greg.Hennessy@nviz.net) Received: from mail2.jellyfishnet.co.uk (mail2.jellyfishnet.co.uk [93.91.20.10]) by mx1.freebsd.org (Postfix) with ESMTP id 4F3ED8FC15 for ; Thu, 7 Jul 2011 22:24:14 +0000 (UTC) Received: from pemexhub01.jellyfishnet.co.uk.local (93.91.20.2) by mail2.jellyfishnet.co.uk (93.91.20.10) with Microsoft SMTP Server (TLS) id 8.1.436.0; Thu, 7 Jul 2011 23:24:15 +0100 Received: from PEMEXMBXVS04.jellyfishnet.co.uk.local ([192.168.65.51]) by pemexhub01.jellyfishnet.co.uk.local ([192.168.65.7]) with mapi; Thu, 7 Jul 2011 23:24:13 +0100 From: Greg Hennessy To: Calomel Org Date: Thu, 7 Jul 2011 23:24:12 +0100 Thread-Topic: pf ALTQ bandwidth limited to a 32bit value (4294Mb) Thread-Index: Acw83e7+r7wjbnM8QvGennLH9akvMQAFqm7g Message-ID: <9EB23F6C23A8B6488E8BCC92A48E832612777E37A7@PEMEXMBXVS04.jellyfishnet.co.uk.local> References: <20110706152506.GA26334@calomel.org> <9EB23F6C23A8B6488E8BCC92A48E83261277A0ACB9@PEMEXMBXVS04.jellyfishnet.co.uk.local>, <20110707194150.GA6463@calomel.org> In-Reply-To: <20110707194150.GA6463@calomel.org> Accept-Language: en-US, en-GB Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US, en-GB MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: "freebsd-pf@freebsd.org" Subject: Re: pf ALTQ bandwidth limited to a 32bit value (4294Mb) X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Jul 2011 22:24:14 -0000 Interesting read. Sounds like you need a BreakingPoint to really give it a workout with real = world style traffic profiles and volumes. Greg Sent from my Android phone using TouchDown (www.nitrodesk.com) ________________________________ From: Calomel Org Sent: 07 July 2011 19:41:50 To: Greg Hennessy Cc: freebsd-pf@freebsd.org Subject: Re: pf ALTQ bandwidth limited to a 32bit value (4294Mb) Greg, Pf performance is quite good. The machine averages 9.2 Gbits/sec or 1.15 gigabytes per second (GB/s) in each direction, simultaneously. Interrupt load is about 12%. With a single Linux box on either side of the firewall we see around 161K packets per second and can create 4000 states per second. With more machines on either side on the firewall we are looking to get closer to a million pps and a higher state creation rate. I am not sure what limits we will see then. We published a more detailed write up here under "Can we achieve 10 gigabit speeds ?" Network Tuning and Performance https://calomel.org/network_performance.html -- Calomel @ https://calomel.org Open Source Research and Reference On Wed, Jul 06, 2011 at 07:09:59PM -0400, Greg Hennessy wrote: >> >> ALTQ using hfsc is limited to a maximum parent bandwidth of 4294Mb. >> This value is 2^32 or 4,294,967,296 bits. If you set the bandwidth any h= igher, >> altq will flip back to zero. This "bug" was found when trying to test 10= gigabit >> and 40 gigabit bandwidth models. > >What a problem to have :-) > >On a side note out of pure curiousity, what's PF performance like up in th= e stratosphere under those sort of loads/packet rates ? :-) > > >Greg > >_______________________________________________ >freebsd-pf@freebsd.org mailing list >http://lists.freebsd.org/mailman/listinfo/freebsd-pf >To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org"