Hi misc@ I recently introduced an OpenBSD firewall inline and noticed a reduction in overall download speeds. I am trying to understand why this may be so. The firewall is Ubiquiti ERL running 6.7 release. Internet connection is Comcast xfinity via cable modem, plan 200 Mbits/s down and 10 Mbits/s up. Details follow:
1. config #1: MacBook - Linksys WRT1200AC - xfinity cable modem (speed: ~210 Mbits/s down, 6 Mbits/s up) 2. config #2: MacBook - Linksys WRT1200AC - Ubiquiti ERL - xfinity cable modem (speed: ~90 MBits down, 6 Mbits/s up) 3. config #3 (Line speed): MacBook wired to cable modem (~230 Mbits/s down, ~8 Mbits/s up). Linksys is running latest OpenWrt, and speed tests were run on MacBook connected wired to Linksys. It was difficult to try tcpbench since the setup was cumbersome, and iperf3 public servers end up being busy more often than not (and threads on misc@ indicated iperf3 wasn't as reliable either). Test numbers come from speedtest.net and speed.cloudflare.com. While I realize this speed test is hardly accurate, I have tried to maintain the same configuration (no ERL and inline ERL) to obtain relative numbers. I am trying to understand the reduction from 210 Mbits/s down to 90 Mbits/s down between config #1 and config #2 above. The slowdown is not noticeable to family, so this is more of my intellectual curiosity than screams over a buffering video! :-) Relevant system information (dmesg, etc.) below. All sysctl values attached as sysctl.txt I gathered it by reading similar threads on misc@. If I missed anything, please let me know. Thanks in advance. -Amarendra dmesg: Copyright (c) 1982, 1986, 1989, 1991, 1993 The Regents of the University of California. All rights reserved. Copyright (c) 1995-2020 OpenBSD. All rights reserved. https://www.OpenBSD.org OpenBSD 6.7 (GENERIC.MP) #134: Thu May 7 16:05:06 MDT 2020 dera...@octeon.openbsd.org:/usr/src/sys/arch/octeon/compile/GENERIC.MP real mem = 536870912 (512MB) avail mem = 506740736 (483MB) mainbus0 at root: board 20002 rev 2.18 cpu0 at mainbus0: CN50xx CPU rev 0.1 500 MHz, Software FP emulation cpu0: cache L1-I 32KB 4 way D 16KB 64 way, L2 128KB 8 way cpu1 at mainbus0: CN50xx CPU rev 0.1 500 MHz, Software FP emulation cpu1: cache L1-I 32KB 4 way D 16KB 64 way, L2 128KB 8 way clock0 at mainbus0: int 5 octcrypto0 at mainbus0 iobus0 at mainbus0 simplebus0 at iobus0: "soc" octciu0 at simplebus0 octsmi0 at simplebus0 octpip0 at simplebus0 octgmx0 at octpip0 interface 0 cnmac0 at octgmx0: RGMII, address 78:8a:20:46:a8:c0 atphy0 at cnmac0 phy 7: AR8035 10/100/1000 PHY, rev. 2 cnmac1 at octgmx0: RGMII, address 78:8a:20:46:a8:c1 atphy1 at cnmac1 phy 6: AR8035 10/100/1000 PHY, rev. 2 cnmac2 at octgmx0: RGMII, address 78:8a:20:46:a8:c2 atphy2 at cnmac2 phy 5: AR8035 10/100/1000 PHY, rev. 2 com0 at simplebus0: ns16550a, 64 byte fifo com0: console dwctwo0 at iobus0 base 0x1180068000000 irq 56 usb0 at dwctwo0: USB revision 2.0 uhub0 at usb0 configuration 1 interface 0 "Octeon DWC2 root hub" rev 2.00/1.00 addr 1 octrng0 at iobus0 base 0x1400000000000 irq 0 /dev/ksyms: Symbol table not valid. umass0 at uhub0 port 1 configuration 1 interface 0 "Lexar USB Flash Drive" rev 2.10/11.00 addr 2 umass0: using SCSI over Bulk-Only scsibus0 at umass0: 2 targets, initiator 0 sd0 at scsibus0 targ 1 lun 0: <Lexar, USB Flash Drive, 1100> removable serial.21c40cd1719080003000 sd0: 30526MB, 512 bytes/sector, 62517248 sectors vscsi0 at root scsibus1 at vscsi0: 256 targets softraid0 at root scsibus2 at softraid0: 256 targets boot device: sd0 root on sd0a (2124441bc835a462.a) swap on sd0b dump on sd0b WARNING: No TOD clock, believing file system. WARNING: CHECK AND RESET THE DATE! pftcl -s: match in all scrub (no-df random-id max-mss 1440) block drop in quick on ! cnmac0 inet from xx.xx.xx.xx/23 to any block drop in quick inet from xx.xx.xx.xx to any block drop all pass out quick on egress inet from (vether0:network) to any flags S/SA nat-to (egress) round-robin pass out quick inet all flags S/SA pass in on vether0 inet all flags S/SA pass in on cnmac1 inet all flags S/SA pass in on cnmac2 inet all flags S/SA pfctl -si: Status: Enabled for 3 days 18:14:11 Debug: err Interface Stats for egress IPv4 IPv6 Bytes In 64537867779 0 Bytes Out 7005140381 0 Packets In Passed 56024370 0 Blocked 43050 0 Packets Out Passed 22271061 0 Blocked 0 0 State Table Total Rate current entries 847 half-open tcp 23 searches 158989755 489.4/s inserts 1095307 3.4/s removals 1094460 3.4/s Counters match 1343178 4.1/s bad-offset 0 0.0/s fragment 0 0.0/s short 1 0.0/s normalize 0 0.0/s memory 0 0.0/s bad-timestamp 0 0.0/s congestion 41 0.0/s ip-option 26164 0.1/s proto-cksum 0 0.0/s state-mismatch 10758 0.0/s state-insert 0 0.0/s state-limit 0 0.0/s src-limit 0 0.0/s synproxy 0 0.0/s translate 0 0.0/s no-route 0 0.0/s pfctl -s memory: states hard limit 100000 src-nodes hard limit 10000 frags hard limit 16384 tables hard limit 1000 table-entries hard limit 200000 pktdelay-pkts hard limit 10000 The netlivlocks value keeps on increasing regularly: kern.netlivelocks=57911 netstat -m: 1009 mbufs in use: 917 mbufs allocated to data 5 mbufs allocated to packet headers 87 mbufs allocated to socket names and addresses 801/7256 mbuf 2048 byte clusters in use (current/peak) 0/15 mbuf 2112 byte clusters in use (current/peak) 0/24 mbuf 4096 byte clusters in use (current/peak) 0/8 mbuf 8192 byte clusters in use (current/peak) 0/0 mbuf 9216 byte clusters in use (current/peak) 0/0 mbuf 12288 byte clusters in use (current/peak) 0/0 mbuf 16384 byte clusters in use (current/peak) 0/8 mbuf 65536 byte clusters in use (current/peak) 6512/17088/131072 Kbytes allocated to network (current/peak/max) 0 requests for memory denied 0 requests for memory delayed 0 calls to protocol drain routines netstat -i: Name Mtu Network Address Ipkts Ifail Opkts Ofail Colls lo0 32768 <Link> 198 0 198 0 0 lo0 32768 localhost/1 localhost 198 0 198 0 0 lo0 32768 fe80::%lo0/ fe80::1%lo0 198 0 198 0 0 lo0 32768 127/8 localhost 198 0 198 0 0 cnmac0 1600 <Link> a8:28:dc:cc:2e:6f 56088774 0 22283491 2688 0 cnmac0 1600 73.231.60/2 c-73-231-60-128.h 56088774 0 22283491 2688 0 cnmac1 1600 <Link> 78:8a:20:46:a8:c1 23646497 4 56569853 48 0 cnmac2 1600 <Link> 78:8a:20:46:a8:c2 14823 0 226198 226198 0 enc0* 0 <Link> 0 0 0 0 0 bridge0 1500 <Link> 23187238 0 57022219 0 0 vether0 32768 <Link> fe:e1:ba:d0:c8:a9 23056709 0 56795991 0 0 vether0 32768 192.168.10/ 192.168.10.1 23056709 0 56795991 0 0 pflog0 33136 <Link> 0 0 26171 0 0
kern.ostype=OpenBSD kern.osrelease=6.7 kern.osrevision=202005 kern.version=OpenBSD 6.7 (GENERIC.MP) #134: Thu May 7 16:05:06 MDT 2020 dera...@octeon.openbsd.org:/usr/src/sys/arch/octeon/compile/GENERIC.MP kern.maxvnodes=14901 kern.maxproc=542 kern.maxfiles=2950 kern.argmax=524288 kern.securelevel=1 kern.hostname=spike.lan kern.hostid=0 kern.clockrate=tick = 10000, tickadj = 40, hz = 100, profhz = 100, stathz = 100 kern.posix1version=200809 kern.ngroups=16 kern.job_control=1 kern.saved_ids=1 kern.boottime=Wed Sep 30 19:56:41 2020 kern.domainname= kern.maxpartitions=16 kern.rawpartition=2 kern.maxthread=798 kern.nthreads=51 kern.osversion=GENERIC.MP#134 kern.somaxconn=128 kern.sominconn=80 kern.nosuidcoredump=1 kern.fsync=1 kern.sysvmsg=1 kern.sysvsem=1 kern.sysvshm=1 kern.msgbufsize=16336 kern.malloc.buckets=16,32,64,128,256,512,1024,2048,4096,8192,16384,32768,65536,131072,262144,524288 kern.malloc.bucket.16=(calls = 8448 total_allocated = 1024 total_free = 753 elements = 1024 high watermark = 5120 could_free = 0) kern.malloc.bucket.32=(calls = 15552 total_allocated = 512 total_free = 308 elements = 512 high watermark = 2560 could_free = 0) kern.malloc.bucket.64=(calls = 18806 total_allocated = 1536 total_free = 173 elements = 256 high watermark = 1280 could_free = 7) kern.malloc.bucket.128=(calls = 5889 total_allocated = 128 total_free = 17 elements = 128 high watermark = 640 could_free = 0) kern.malloc.bucket.256=(calls = 11923 total_allocated = 128 total_free = 56 elements = 64 high watermark = 320 could_free = 0) kern.malloc.bucket.512=(calls = 9331 total_allocated = 128 total_free = 33 elements = 32 high watermark = 160 could_free = 0) kern.malloc.bucket.1024=(calls = 3587 total_allocated = 48 total_free = 15 elements = 16 high watermark = 80 could_free = 0) kern.malloc.bucket.2048=(calls = 127 total_allocated = 56 total_free = 8 elements = 8 high watermark = 40 could_free = 0) kern.malloc.bucket.4096=(calls = 102 total_allocated = 8 total_free = 2 elements = 4 high watermark = 20 could_free = 0) kern.malloc.bucket.8192=(calls = 1050 total_allocated = 26 total_free = 1 elements = 2 high watermark = 10 could_free = 0) kern.malloc.bucket.16384=(calls = 7764 total_allocated = 9 total_free = 2 elements = 1 high watermark = 5 could_free = 0) kern.malloc.bucket.32768=(calls = 7 total_allocated = 6 total_free = 0 elements = 1 high watermark = 5 could_free = 0) kern.malloc.bucket.65536=(calls = 12311 total_allocated = 1 total_free = 0 elements = 1 high watermark = 5 could_free = 0) kern.malloc.bucket.131072=(calls = 0 total_allocated = 0 total_free = 0 elements = 1 high watermark = 5 could_free = 0) kern.malloc.bucket.262144=(calls = 0 total_allocated = 0 total_free = 0 elements = 1 high watermark = 5 could_free = 0) kern.malloc.bucket.524288=(calls = 0 total_allocated = 0 total_free = 0 elements = 1 high watermark = 5 could_free = 0) kern.malloc.kmemnames=free,,devbuf,,pcb,rtable,,,,ifaddr,soopts,sysctl,counters,,ioctlops,,,,,iov,mount,,NFS_req,NFS_mount,,vnodes,namecache,UFS_quota,UFS_mount,shm,VM_map,sem,dirhash,ACPI,VM_pmap,,,,file,file_desc,sigio,proc,subproc,VFS_cluster,,,MFS_node,,,Export_Host,NFS_srvsock,,NFS_daemon,ip_moptions,in_multi,ether_multi,mrt,ISOFS_mount,ISOFS_node,MSDOSFS_mount,MSDOSFS_fat,MSDOSFS_node,ttys,exec,miscfs_mount,fusefs_mount,,,,,,,,,pfkey_data,tdb,xform_data,,pagedep,inodedep,newblk,,,indirdep,,,,,,,,,VM_swap,,,,,,UVM_amap,UVM_aobj,,USB,USB_device,USB_HC,witness,memdesc,,,crypto_data,,IPsec_creds,,,,emuldata,,,,,,,,,ip6_options,NDP,,,temp,NTFS_mount,NTFS_node,NTFS_fnode,NTFS_dir,NTFS_hash,NTFS_attr,NTFS_data,NTFS_decomp,NTFS_vrun,kqueue,,SYN_cache,UDF_mount,UDF_file_entry,UDF_file_id,,AGP_Memory,DRM kern.malloc.kmemstat.free=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.devbuf=(inuse = 197, calls = 1097, memuse = 325K, limblocks = 0, maxused = 325K, limit = 78644K, spare = 0, sizes = (16,32,64,128,256,512,1024,2048,4096,8192,16384,32768,65536)) kern.malloc.kmemstat.pcb=(inuse = 14, calls = 16, memuse = 9K, limblocks = 0, maxused = 9K, limit = 78644K, spare = 0, sizes = (16,32,1024)) kern.malloc.kmemstat.rtable=(inuse = 105, calls = 722, memuse = 6K, limblocks = 0, maxused = 6K, limit = 78644K, spare = 0, sizes = (16,32,64,128,256)) kern.malloc.kmemstat.ifaddr=(inuse = 74, calls = 77, memuse = 13K, limblocks = 0, maxused = 13K, limit = 78644K, spare = 0, sizes = (32,64,128,256,4096)) kern.malloc.kmemstat.soopts=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.sysctl=(inuse = 3, calls = 3, memuse = 2K, limblocks = 0, maxused = 2K, limit = 78644K, spare = 0, sizes = (32,128,1024)) kern.malloc.kmemstat.counters=(inuse = 39, calls = 39, memuse = 34K, limblocks = 0, maxused = 34K, limit = 78644K, spare = 0, sizes = (128,256,512,1024,4096,8192)) kern.malloc.kmemstat.ioctlops=(inuse = 0, calls = 7445, memuse = 0K, limblocks = 0, maxused = 4K, limit = 78644K, spare = 0, sizes = (256,512,1024,2048,4096)) kern.malloc.kmemstat.iov=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.mount=(inuse = 9, calls = 9, memuse = 9K, limblocks = 0, maxused = 9K, limit = 78644K, spare = 0, sizes = (1024)) kern.malloc.kmemstat.NFS_req=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.NFS_mount=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.vnodes=(inuse = 1204, calls = 7084, memuse = 76K, limblocks = 0, maxused = 76K, limit = 78644K, spare = 0, sizes = (64,128,256)) kern.malloc.kmemstat.namecache=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.UFS_quota=(inuse = 1, calls = 1, memuse = 16K, limblocks = 0, maxused = 16K, limit = 78644K, spare = 0, sizes = (16384)) kern.malloc.kmemstat.UFS_mount=(inuse = 37, calls = 37, memuse = 57K, limblocks = 0, maxused = 57K, limit = 78644K, spare = 0, sizes = (16,32,64,512,2048,16384)) kern.malloc.kmemstat.shm=(inuse = 2, calls = 2, memuse = 2K, limblocks = 0, maxused = 2K, limit = 78644K, spare = 0, sizes = (256,1024)) kern.malloc.kmemstat.VM_map=(inuse = 2, calls = 2, memuse = 1K, limblocks = 0, maxused = 1K, limit = 78644K, spare = 0, sizes = (256)) kern.malloc.kmemstat.sem=(inuse = 2, calls = 2, memuse = 1K, limblocks = 0, maxused = 1K, limit = 78644K, spare = 0, sizes = (32,128)) kern.malloc.kmemstat.dirhash=(inuse = 147, calls = 174, memuse = 30K, limblocks = 0, maxused = 30K, limit = 78644K, spare = 0, sizes = (16,32,64,128,256,512)) kern.malloc.kmemstat.ACPI=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.VM_pmap=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.file=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.file_desc=(inuse = 2, calls = 3, memuse = 2K, limblocks = 0, maxused = 2K, limit = 78644K, spare = 0, sizes = (512,1024)) kern.malloc.kmemstat.sigio=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.proc=(inuse = 110, calls = 3422, memuse = 67K, limblocks = 0, maxused = 76K, limit = 78644K, spare = 0, sizes = (16,32,64,512,2048,8192)) kern.malloc.kmemstat.subproc=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.VFS_cluster=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.MFS_node=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.Export_Host=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.NFS_srvsock=(inuse = 1, calls = 1, memuse = 1K, limblocks = 0, maxused = 1K, limit = 78644K, spare = 0, sizes = (128)) kern.malloc.kmemstat.NFS_daemon=(inuse = 1, calls = 1, memuse = 16K, limblocks = 0, maxused = 16K, limit = 78644K, spare = 0, sizes = (16384)) kern.malloc.kmemstat.ip_moptions=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.in_multi=(inuse = 12, calls = 15, memuse = 1K, limblocks = 0, maxused = 1K, limit = 78644K, spare = 0, sizes = (32,64,128)) kern.malloc.kmemstat.ether_multi=(inuse = 1, calls = 4, memuse = 1K, limblocks = 0, maxused = 1K, limit = 78644K, spare = 0, sizes = (32)) kern.malloc.kmemstat.mrt=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.ISOFS_mount=(inuse = 1, calls = 1, memuse = 16K, limblocks = 0, maxused = 16K, limit = 78644K, spare = 0, sizes = (16384)) kern.malloc.kmemstat.ISOFS_node=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.MSDOSFS_mount=(inuse = 1, calls = 1, memuse = 8K, limblocks = 0, maxused = 8K, limit = 78644K, spare = 0, sizes = (8192)) kern.malloc.kmemstat.MSDOSFS_fat=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.MSDOSFS_node=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.ttys=(inuse = 19, calls = 19, memuse = 96K, limblocks = 0, maxused = 96K, limit = 78644K, spare = 0, sizes = (512,1024,8192,16384)) kern.malloc.kmemstat.exec=(inuse = 0, calls = 4103, memuse = 0K, limblocks = 0, maxused = 2K, limit = 78644K, spare = 0, sizes = (16,32,256,1024)) kern.malloc.kmemstat.miscfs_mount=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.fusefs_mount=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.pfkey_data=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.tdb=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.xform_data=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.pagedep=(inuse = 1, calls = 1, memuse = 4K, limblocks = 0, maxused = 4K, limit = 78644K, spare = 0, sizes = (4096)) kern.malloc.kmemstat.inodedep=(inuse = 1, calls = 1, memuse = 16K, limblocks = 0, maxused = 16K, limit = 78644K, spare = 0, sizes = (16384)) kern.malloc.kmemstat.newblk=(inuse = 1, calls = 1, memuse = 1K, limblocks = 0, maxused = 1K, limit = 78644K, spare = 0, sizes = (512)) kern.malloc.kmemstat.indirdep=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.VM_swap=(inuse = 7, calls = 7, memuse = 19K, limblocks = 0, maxused = 19K, limit = 78644K, spare = 0, sizes = (16,64,2048,8192)) kern.malloc.kmemstat.UVM_amap=(inuse = 149, calls = 18512, memuse = 6K, limblocks = 0, maxused = 9K, limit = 78644K, spare = 0, sizes = (16,32,64,128,256,512,1024,2048)) kern.malloc.kmemstat.UVM_aobj=(inuse = 2, calls = 2, memuse = 3K, limblocks = 0, maxused = 3K, limit = 78644K, spare = 0, sizes = (16,2048)) kern.malloc.kmemstat.USB=(inuse = 25, calls = 28, memuse = 7K, limblocks = 0, maxused = 7K, limit = 78644K, spare = 0, sizes = (16,32,64,128,256,2048)) kern.malloc.kmemstat.USB_device=(inuse = 4, calls = 4, memuse = 1K, limblocks = 0, maxused = 1K, limit = 78644K, spare = 0, sizes = (16,32,64)) kern.malloc.kmemstat.USB_HC=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.witness=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.memdesc=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.crypto_data=(inuse = 1, calls = 1, memuse = 1K, limblocks = 0, maxused = 1K, limit = 78644K, spare = 0, sizes = (1024)) kern.malloc.kmemstat.IPsec_creds=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.emuldata=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.ip6_options=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.NDP=(inuse = 8, calls = 8, memuse = 1K, limblocks = 0, maxused = 1K, limit = 78644K, spare = 0, sizes = (32)) kern.malloc.kmemstat.temp=(inuse = 38, calls = 52031, memuse = 4K, limblocks = 0, maxused = 84K, limit = 78644K, spare = 0, sizes = (16,32,64,128,512,1024,2048,4096,8192,16384,65536)) kern.malloc.kmemstat.NTFS_mount=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.NTFS_node=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.NTFS_fnode=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.NTFS_dir=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.NTFS_hash=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.NTFS_attr=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.NTFS_data=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.NTFS_decomp=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.NTFS_vrun=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.kqueue=(inuse = 19, calls = 19, memuse = 28K, limblocks = 0, maxused = 28K, limit = 78644K, spare = 0, sizes = (512,2048)) kern.malloc.kmemstat.SYN_cache=(inuse = 2, calls = 2, memuse = 16K, limblocks = 0, maxused = 16K, limit = 78644K, spare = 0, sizes = (8192)) kern.malloc.kmemstat.UDF_mount=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.UDF_file_entry=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.UDF_file_id=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.AGP_Memory=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.malloc.kmemstat.DRM=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none)) kern.cp_time=37719,90,471182,17159,0,31963068 kern.nchstats.good_hits=1284754 kern.nchstats.negative_hits=34521 kern.nchstats.bad_hits=1668 kern.nchstats.false_hits=1 kern.nchstats.misses=165212 kern.nchstats.long_names=1541 kern.nchstats.pass2=12845 kern.nchstats.2passes=13618 kern.nchstats.ncs_revhits=330 kern.nchstats.ncs_revmiss=3 kern.nchstats.ncs_dothits=0 kern.nchstats.nch_dotdothits=0 kern.forkstat.forks=5282 kern.forkstat.vforks=23 kern.forkstat.tforks=0 kern.forkstat.kthreads=18 kern.forkstat.fork_pages=61817 kern.forkstat.vfork_pages=184 kern.forkstat.tfork_pages=0 kern.forkstat.kthread_pages=0 kern.nselcoll=0 kern.tty.tk_nin=1896 kern.tty.tk_nout=132186 kern.tty.tk_rawcc=1801 kern.tty.tk_cancc=95 kern.ccpu=1948 kern.fscale=2048 kern.nprocs=51 kern.stackgap_random=262144 kern.allowkmem=0 kern.splassert=1 kern.nfiles=144 kern.ttycount=3 kern.numvnodes=14901 kern.seminfo.semmni=10 kern.seminfo.semmns=60 kern.seminfo.semmnu=30 kern.seminfo.semmsl=60 kern.seminfo.semopm=100 kern.seminfo.semume=10 kern.seminfo.semusz=112 kern.seminfo.semvmx=32767 kern.seminfo.semaem=16384 kern.shminfo.shmmax=134217728 kern.shminfo.shmmin=1 kern.shminfo.shmmni=128 kern.shminfo.shmseg=128 kern.shminfo.shmall=8192 kern.allowdt=0 kern.maxclusters=65536 kern.timecounter.tick=1 kern.timecounter.timestepwarnings=0 kern.timecounter.hardware=ioclock kern.timecounter.choice=ioclock(0) kern.maxlocksperuid=1024 kern.bufcachepercent=20 kern.wxabort=0 kern.consdev=tty00 kern.netlivelocks=57901 kern.pool_debug=0 kern.global_ptrace=0 kern.consbufsize=16336 kern.audio.record=0 kern.timeout_stats=added = 81243186, cancelled = 796200, deleted = 2377863, late = 142156, pending = 34, readded = 8491, scheduled = 79752165, rescheduled = 35170, run_softclock = 77840016, run_thread = 2598445, softclocks = 32429986, thread_wakeups = 2481292 kern.utc_offset=0 vm.loadavg=0.00 0.01 0.00 vm.psstrings=0xffffffe130 vm.swapencrypt.enable=1 vm.swapencrypt.keyscreated=0 vm.swapencrypt.keysdeleted=0 vm.nkmempages=8192 vm.anonmin=10 vm.vtextmin=5 vm.vnodemin=10 vm.malloc_conf= fs.posix.setuid=1 net.inet.ip.forwarding=1 net.inet.ip.redirect=1 net.inet.ip.ttl=64 net.inet.ip.sourceroute=0 net.inet.ip.directed-broadcast=0 net.inet.ip.portfirst=1024 net.inet.ip.portlast=49151 net.inet.ip.porthifirst=49152 net.inet.ip.porthilast=65535 net.inet.ip.maxqueue=300 net.inet.ip.encdebug=0 net.inet.ip.ipsec-expire-acquire=30 net.inet.ip.ipsec-invalid-life=60 net.inet.ip.ipsec-pfs=1 net.inet.ip.ipsec-soft-allocs=0 net.inet.ip.ipsec-allocs=0 net.inet.ip.ipsec-soft-bytes=0 net.inet.ip.ipsec-bytes=0 net.inet.ip.ipsec-timeout=86400 net.inet.ip.ipsec-soft-timeout=80000 net.inet.ip.ipsec-soft-firstuse=3600 net.inet.ip.ipsec-firstuse=7200 net.inet.ip.ipsec-enc-alg=aes net.inet.ip.ipsec-auth-alg=hmac-sha1 net.inet.ip.mtudisc=1 net.inet.ip.mtudisctimeout=600 net.inet.ip.ipsec-comp-alg=deflate net.inet.ip.mforwarding=0 net.inet.ip.multipath=0 net.inet.ip.mrtproto=19 net.inet.ip.arpqueued=0 net.inet.ip.arptimeout=1200 net.inet.ip.arpdown=20 net.inet.ip.arpq.len=0 net.inet.ip.arpq.maxlen=50 net.inet.ip.arpq.drops=0 net.inet.icmp.maskrepl=0 net.inet.icmp.bmcastecho=0 net.inet.icmp.errppslimit=100 net.inet.icmp.rediraccept=0 net.inet.icmp.redirtimeout=600 net.inet.icmp.tstamprepl=1 net.inet.ipip.allow=0 net.inet.tcp.rfc1323=1 net.inet.tcp.keepinittime=150 net.inet.tcp.keepidle=14400 net.inet.tcp.keepintvl=150 net.inet.tcp.slowhz=2 net.inet.tcp.baddynamic=1,7,9,11,13,15,17,18,19,20,21,22,23,25,37,42,43,49,53,57,67,68,70,77,79,80,87,88,95,101,102,103,104,105,106,107,109,110,111,113,115,117,119,123,129,135,137,138,139,143,152,163,164,177,178,179,191,194,199,201,202,204,206,210,213,220,372,389,427,433,443,444,445,464,465,468,512,513,514,515,521,526,530,531,532,540,543,544,545,548,554,556,587,631,636,646,706,749,750,751,754,760,853,871,873,888,901,993,995,1080,1109,1127,1433,1434,1524,1525,1529,1723,1900,2049,2105,2106,2108,2110,2111,2112,2120,2121,2401,2600,2601,2602,2603,2604,2605,2606,2607,2608,2627,2983,3031,3109,3260,3306,3389,3517,3689,3690,4190,4444,4500,4559,5002,5060,5222,5269,5280,5298,5353,5354,5432,5680,5900,6000,6001,6002,6003,6004,6005,6006,6007,6008,6009,6010,6514,6566,7000,7001,7002,7003,7004,7005,7006,7007,7008,7009,7326,8025,8026,8140,8953,9418,10050,10051,16992,16993,16994,16995,20005 net.inet.tcp.sack=1 net.inet.tcp.mssdflt=512 net.inet.tcp.rstppslimit=100 net.inet.tcp.ackonpush=0 net.inet.tcp.ecn=0 net.inet.tcp.syncachelimit=10255 net.inet.tcp.synbucketlimit=105 net.inet.tcp.rfc3390=2 net.inet.tcp.reasslimit=8192 net.inet.tcp.sackholelimit=32768 net.inet.tcp.always_keepalive=0 net.inet.tcp.synuselimit=100000 net.inet.tcp.rootonly=2049 net.inet.tcp.synhashsize=293 net.inet.udp.checksum=1 net.inet.udp.baddynamic=7,9,13,18,19,22,37,39,49,53,67,68,69,70,80,88,105,107,109,110,111,123,129,135,137,138,139,143,161,162,163,164,177,178,179,191,194,199,201,202,204,206,210,213,220,372,389,427,444,445,464,468,500,512,513,514,517,518,520,525,533,546,547,548,554,587,623,631,636,646,664,706,749,750,751,853,993,995,1433,1434,1524,1525,1645,1646,1701,1723,1812,1813,1900,2049,2401,3031,3517,3689,3784,3785,4190,4444,4500,4559,4754,4755,4789,5002,5060,5298,5353,5354,5432,7000,7001,7002,7003,7004,7005,7006,7007,7008,7009,7784,8025,8067,9418,10050,10051,16992,16993,16994,16995,20005,26740 net.inet.udp.recvspace=41600 net.inet.udp.sendspace=9216 net.inet.udp.rootonly=2049 net.inet.gre.allow=0 net.inet.gre.wccp=0 net.inet.esp.enable=1 net.inet.esp.udpencap=1 net.inet.esp.udpencap_port=4500 net.inet.ah.enable=1 net.inet.etherip.allow=0 net.inet.ipcomp.enable=0 net.inet.carp.allow=1 net.inet.carp.preempt=0 net.inet.carp.log=2 net.inet.divert.recvspace=65636 net.inet.divert.sendspace=65636 net.inet6.ip6.forwarding=0 net.inet6.ip6.redirect=1 net.inet6.ip6.hlim=64 net.inet6.ip6.mrtproto=0 net.inet6.ip6.maxfragpackets=200 net.inet6.ip6.log_interval=5 net.inet6.ip6.hdrnestlimit=10 net.inet6.ip6.dad_count=1 net.inet6.ip6.auto_flowlabel=1 net.inet6.ip6.defmcasthlim=1 net.inet6.ip6.use_deprecated=1 net.inet6.ip6.maxfrags=200 net.inet6.ip6.mforwarding=0 net.inet6.ip6.multipath=0 net.inet6.ip6.multicast_mtudisc=0 net.inet6.ip6.neighborgcthresh=2048 net.inet6.ip6.maxdynroutes=4096 net.inet6.ip6.dad_pending=0 net.inet6.ip6.mtudisctimeout=600 net.inet6.ip6.soiikey=7546bde6d656e1a9c2713814fa73365b net.inet6.icmp6.redirtimeout=600 net.inet6.icmp6.nd6_delay=5 net.inet6.icmp6.nd6_umaxtries=3 net.inet6.icmp6.nd6_mmaxtries=3 net.inet6.icmp6.errppslimit=100 net.inet6.icmp6.nd6_maxnudhint=0 net.inet6.icmp6.mtudisc_hiwat=1280 net.inet6.icmp6.mtudisc_lowat=256 net.inet6.icmp6.nd6_debug=0 net.inet6.divert.recvspace=65636 net.inet6.divert.sendspace=65636 net.bpf.bufsize=32768 net.bpf.maxbufsize=2097152 net.mpls.ttl=255 net.mpls.mapttl_ip=1 net.mpls.mapttl_ip6=0 net.pipex.enable=0 net.pipex.inq.len=0 net.pipex.inq.maxlen=256 net.pipex.inq.drops=0 net.pipex.outq.len=0 net.pipex.outq.maxlen=256 net.pipex.outq.drops=0 hw.machine=octeon hw.model=Cavium OCTEON (rev 0.1) @ 500 MHz hw.ncpu=2 hw.byteorder=4321 hw.pagesize=16384 hw.disknames=sd0:2124441bc835a462 hw.diskcount=1 hw.cpuspeed=500 hw.physmem=536870912 hw.usermem=536838144 hw.ncpufound=2 hw.allowpowerdown=1 hw.ncpuonline=2 ddb.radix=16 ddb.max_width=80 ddb.max_line=24 ddb.tab_stop_width=8 ddb.panic=1 ddb.console=0 ddb.log=1 ddb.trigger=0 vfs.mounts.ffs has 9 mounted instances vfs.ffs.max_softdeps=10648 vfs.ffs.sd_tickdelay=2 vfs.ffs.sd_worklist_push=0 vfs.ffs.sd_blk_limit_push=0 vfs.ffs.sd_ino_limit_push=0 vfs.ffs.sd_blk_limit_hit=0 vfs.ffs.sd_ino_limit_hit=0 vfs.ffs.sd_sync_limit_hit=0 vfs.ffs.sd_indir_blk_ptrs=0 vfs.ffs.sd_inode_bitmap=0 vfs.ffs.sd_direct_blk_ptrs=0 vfs.ffs.sd_dir_entry=0 vfs.ffs.dirhash_dirsize=2560 vfs.ffs.dirhash_maxmem=5242880 vfs.ffs.dirhash_mem=269767 vfs.nfs.iothreads=-1 vfs.fuse.fusefs_open_devices=0 vfs.fuse.fusefs_fbufs_in=0 vfs.fuse.fusefs_fbufs_wait=0 vfs.fuse.fusefs_pool_pages=0