On 2013 May 15 (Wed) at 10:29:24 +0100 (+0100), andy wrote: :I run 12 OpenBSD firewalls, and I have an issue on my highest throughput :boxes. I have HP DL160 G6 boxes with Intel ET2 4 port NIC's. :I have a problem where I cannot run traffic any faster than ~700Mbit as I :am hitting 100% utilisation on the first core due to the giant big lock :trying to process the MSI interrupts.
For performance, you can try running the UP kernel, or upgrading the underlying server. For firewall performance, the memory speed is one of the most important aspects. Single CPU GHz, QPI, etc, etc. Make sure to disable pool_debug: kern.pool_debug=0 >From memory, the performance you are describing is around the maximum that a DL160 can handle. The DL360s will give you far better pps performance. As you have seen, there is some work being done to improve the speed of network processing, but this is taking some time. -- "Never underestimate the power of a small tactical nuclear weapon."
