Date: Tue, 16 Dec 2003 10:48:02 +0200 From: Andriy Korud <akorud@polynet.lviv.ua> To: freebsd-net@freebsd.org Subject: Large scale NAT problems Message-ID: <1071564482.3fdec6c2ac5fb@isp.polynet.lviv.ua>
next in thread | raw e-mail | index | archive | help
Hi, I'm tring to make NAT on FreeBSD box for 2500 clients on 35Mbit uplink. Box is Xeon 2.8GHz, 1G RAM, 2xIntel PRO/1000 (em) adapters. FreeBSD 4.9-STABLE, kernel is configured for single processor (HT not used), with DEVICE_POLLING and HZ=2000, LARGE_NAT defined. Nat was done using ipnat, no additional filtering. The problem is that when traffic grows to 10Mbit and number of active NAT sessions reach 70000, CPU usage exponentialy grows and system spends all CPU time in interrupts handling. The system become completely unreponsible and unsable and only hard reset is the solution. And worse thing is that Linux on Cel/800 with SOHO cards do that NATing with 5% CPU load without any problem :-(. Maybe I shoud try natd? May this help? Any suggestions? thanks in advance, Andriy Korud
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1071564482.3fdec6c2ac5fb>