I have a packet filtering bridge running on PF and OpenBSD 6.8. My hardware is a SuperMicro Atom D525 service with dual Intel Gigabit Nics. I've added a second dual Intel card in a PCIe slot.
When I run iPerf across this bridge, I max out at about 550Mbit/s. I'm running systat on the bridge. At peak load, I'm seeing 1500 ~ 1700 interrupts per second for each interface in the bridge via systat. I'm noticing similar limitations from another OpenBSD 6.8 firewall that I run. This is an Atom C2758 machine. And in this case, I'm getting about 650 ~ 700 Mbit/s from the slightly faster hardware. My questions are: * Where should I be looking for the bottleneck on this problem? * Is it possible with tuning to forward packets over this hardware at full gigabit speeds, ~950 Mbit/s? Thanks for any help you can give, -- Chris -- Chris __o "All I was trying to do was get home from work." _`\<,_ -Rosa Parks ___(*)/_(*)____.___o____..___..o...________ooO..._____________________ Christopher Sean Hilton [chris/at/vindaloo/dot/com]