Hi!
Something to read:
http://people.freebsd.org/~hmp/utilities/satbl/sysctl-net.html
I have these in the sysctl.conf
kern.ipc.somaxconn=4096
net.inet.tcp.recvspace=78840
net.inet.tcp.sendspace=78840
kern.ipc.shmmax=67108864
kern.ipc.shmmni=200
kern.ipc.shmseg=128
kern.ipc.semmni=70
net.local.stream.sendspace=82320
net.local.stream.recvspace=82320
net.inet.tcp.local_slowstart_flightsize=10
net.inet.tcp.nolocaltimewait=1
net.inet.tcp.hostcache.expire=3900
and the loader.conf
kern.maxusers=512
kern.ipc.nmbclusters=32768
kern.ipc.maxsockets=81920
kern.ipc.maxsockbuf=1048576
net.inet.tcp.tcbhashsize=4096
net.inet.tcp.hostcache.hashsize=1024
Regards,
Istvan
Alexander Strange wrote:
We're running a rather high-load webserver using FreeBSD
7-RELEASE/amd64/nginx on an Intel em gigabit connection.
Performance is good for our current bandwidth use (about 20Mbit and
~2000 connections/sec at the moment), but a large number of HTTP
requests are being immediately dropped before getting to nginx. I see
complaints about this with earlier versions of FreeBSD -
http://forum.lighttpd.net/topic/171 - but no solutions. Does anyone
know what could be the problem, or anything we could do about it?
There are several other servers running earlier FreeBSDs on i386 which
don't seem to have this problem, but I still haven't ruled out
upstream hardware problems or Sandvine yet.
On the server:
-nginx's error log is full of "accept() failed (53: Software caused
connection abort)", sometimes printing three or four at the same time.
-messages is full of:
Limiting open port RST response from 441 to 200 packets/sec
Limiting open port RST response from 488 to 200 packets/sec
Limiting open port RST response from 399 to 200 packets/sec
Limiting open port RST response from 434 to 200 packets/sec
Limiting open port RST response from 308 to 200 packets/sec
I'm not sure if that's related or not.
-sysctl.conf:
net.inet.tcp.tso=1
kern.ipc.somaxconn=10240
kern.ipc.nmbclusters=65536
net.inet.tcp.sendspace=65536
net.inet.tcp.recvspace=65536
net.inet.tcp.rfc1323=1
kern.ipc.maxsockbuf=262144
net.inet.tcp.blackhole=2
net.inet.udp.blackhole=1
net.inet.tcp.msl=7500
net.inet.icmp.icmplim=400
net.inet.tcp.drop_synfin=1
net.inet.tcp.icmp_may_rst=0
net.inet.tcp.fast_finwait2_recycle=1
-netstat -m:
4677/6603/11280 mbufs in use (current/cache/total)
1017/2643/3660/65536 mbuf clusters in use (current/cache/total/max)
1017/1961 mbuf+clusters out of packet secondary zone in use
(current/cache)
9/514/523/12800 4k (page size) jumbo clusters in use
(current/cache/total/max)
0/0/0/6400 9k jumbo clusters in use (current/cache/total/max)
0/0/0/3200 16k jumbo clusters in use (current/cache/total/max)
3239K/8992K/12232K bytes allocated to network (current/cache/total)
0/0/0 requests for mbufs denied (mbufs/clusters/mbuf+clusters)
0/0/0 requests for jumbo clusters denied (4k/9k/16k)
0/0/0 sfbufs in use (current/peak/max)
0 requests for sfbufs denied
0 requests for sfbufs delayed
9204 requests for I/O initiated by sendfile
0 calls to protocol drain routines
nginx is not running any accept filters.
Locally, after sending an HTTP request, I get a normal connection
close, then one RST with sequence 1, then another (possibly more than
one) RST with sequence 2. I can post a tcpdump sequence if necessary,
after I sanitize some cookies away.
_______________________________________________
freebsd-performance@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-performance
To unsubscribe, send any mail to
"[EMAIL PROTECTED]"
_______________________________________________
freebsd-performance@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-performance
To unsubscribe, send any mail to "[EMAIL PROTECTED]"