Re: 10GbE (Intel X540) performance on OpenBSD 5.3
The X540 is capable of line rate, the question is more does the hardware around it support it.. traffic testing with linux, and freebsd has shown this to be the case. I do not have specific openbsd data regarding this.. but I know that you can peg 10 gigabit with that card. RG On 08/07/2013 09:40 PM, Florian Obser wrote: On Wed, Aug 07, 2013 at 12:57:55PM -0400, Maxim Khitrov wrote: On Wed, Aug 7, 2013 at 11:44 AM, Florian Obser flor...@narrans.de wrote: On Wed, Aug 07, 2013 at 10:26:22AM -0400, Maxim Khitrov wrote: [...] Increasing the MTU on both ix0 interfaces to 9000 gives me ~7.2 Gbps: you expect a lot of jumbo frames in front of / behind your firewall? (if the answer is no, why are you testing that?) It's a possibility. What this tells me, however, is that the the throughput isn't the (main) problem. The per-packet processing overhead appears to be the limiting factor, which is why I asked about indeed, during my tests systat showed that the system is spending 99% in interrupt handlers. Having context switches because you are running iperf localy is not good[tm] in this situation. checksum offloading. anyway, I was testing an Intel 82599 system in July which will become a border router. All of this is forwarding rate; it took me 2 days to beg, borrow and steal enough hw to actually generate the traffic. (I had 4 systems in front of and 4 systems behind the router, all doing 1Gb/s) What tools were you using to generate the traffic and to calculate bytes/packets per second? I assume interrupts per second came from systat? right, the interrupt rate came from systat, traffic was generated with iperf and measured with bwm-mg in 30 second average mode. iperf was running in dualtest mode and instructed to run for an hour so that I had a chance to start all iperfs before the first one would finish ;) no other switches (besides -c and -s of course). Mit freundlichen Grüßen Robert Garrett Senior System Engineer Technical Projects Solutions -- InterNetX GmbH Maximilianstr. 6 93047 Regensburg Germany Tel. +49 941 59559-480 Fax +49 941 59559-245 www.internetx.com www.facebook.com/InterNetX www.twitter.com/InterNetX Geschäftsführer/CEO: Thomas Mörz Amtsgericht Regensburg, HRB 7142
Re: Accept two vlans (Solved)
Martin, Christian, Kent thank you all for explanation. It was more than enough to understand things.
Re: Accept two vlans
Am 07.08.2013 16:20, schrieb Christian Weisgerber: Well, you can either use two NICs on your gateway, one connected to a vlan1 port on the switch, the other to vlan2. Or you can can set up vlan1 and vlan2 on em0 and connect them to a trunk port on the switch. This is straight from my home gateway: == /etc/hostname.em0 == description Trunk up == /etc/hostname.vlan1 == description LAN vlan 1 vlandev em0 inet 172.16.0.1 255.255.255.0 NONE inet6 2001:6f8:124a::1 == /etc/hostname.vlan2 == description WLAN vlan 2 vlandev em0 inet 172.16.1.1 255.255.255.0 NONE inet6 2001:6f8:124a:1::1 I'm just a little bit curious. Why do you use VLANs instead of just a physical interface for each lan (wlan). Is it because VLANs give you a little bit more flexibility? By Joerg [demime 1.01d removed an attachment of type application/pkcs7-signature which had a name of smime.p7s]
Re: 10GbE (Intel X540) performance on OpenBSD 5.3
* Florian Obser flor...@narrans.de [2013-08-07 17:45]: regarding the no state and keep state (sloppy) tests: as said, this will be a border router and _will_ see asymetric routing. I expect a normal pf.conf i.e. with keep state to be on the order of keep state (sloppy); I did not test that though. I did when I wrote sloppy: teh performance difference between full-blown and sloppy tracking is nil. -- Henning Brauer, h...@bsws.de, henn...@openbsd.org BS Web Services GmbH, http://bsws.de, Full-Service ISP Secure Hosting, Mail and DNS Services. Dedicated Servers, Root to Fully Managed Henning Brauer Consulting, http://henningbrauer.com/
Re: 10GbE (Intel X540) performance on OpenBSD 5.3
On 08/07/2013 12:55 PM, Maxim Khitrov wrote: On Wed, Aug 7, 2013 at 10:31 AM, Martin Schröder mar...@oneiros.de wrote: 2013/8/7 Maxim Khitrov m...@mxcrypt.com: I've read the Network Tuning and Performance Guide @ calomel.org, Ignore that site and search the list archives. Understood :) I found a number of recommendations for the things to keep an eye on, but nothing that gave me any ideas on what else to try for improving the performance. Several things come to mind: a) is the BIOS current on the test systems? b) power savings options should be turned off in BIOS. 8k interrupts should not be saturating a CPU line that, in my humble opinion. I maintain firewalls running on older Xeons, which serve 4-5 10GbE cards, and when the system is loaded, it can handle 25k or so interrupts before things tip over. c) is the PCIE slot set to PCIe 3 and 8 or more lanes? This is probably a red herring, but some cases helpfully reduce to PCIE 1.x speeds unless forced. d) You may want to disable or reduce multiple cores in the BIOS. My testing with multiple cores for each physical CPU actually showed reduced performance and increased variance between performance test runs. e) Keep in mind, if these devices forward packets, both the inbound and outbound interface will be under load. -- -- John Jasen (jja...@realityfailure.org) -- No one will sorrow for me when I die, because those who would -- are dead already. -- Lan Mandragoran, The Wheel of Time, New Spring
USB Audio
I ditched my Mac for good am trying to get everything running that was connected to it. Working on the SoundSticks now. Full dmesg down below. I linked the audio1 devices to audio. $ ls -l /dev/audio* lrwxr-xr-x 1 root wheel11 Aug 7 14:47 /dev/audio - /dev/audio1 lrwxr-xr-x 1 root wheel14 Aug 7 14:48 /dev/audioctl - /dev/audioctl1 lrwxr-xr-x 1 root wheel11 Aug 7 14:48 /dev/mixer - /dev/mixer1 lrwxr-xr-x 1 root wheel11 Aug 7 14:48 /dev/sound - /dev/sound1 audio0 at uhub5 port 1 configuration 1 interface 0 harman/kardon SoundSticks rev 1.10/0.01 addr 8 uaudio0: audio rev 1.00, 6 mixer controls audio1 at uaudio0 $ cat /projects/Music/scream.aif /dev/sound cat: stdout: Input/output error But my apps like vlc play through internal speakers still just fine. I know the SoundSticks work with OpenBSD so obviously I'm an idiot and missing something. $ audioctl name=USB audio version= config=uaudio encodings=slinear_le:16:2:1,slinear_le:24:3:1 properties=independent full_duplex=0 fullduplex=0 blocksize=8816 hiwat=7 lowat=5 output_muted=0 monitor_gain=0 mode= play.rate=44100 play.channels=2 play.precision=16 play.bps=2 play.msb=1 play.encoding=slinear_le play.gain=127 play.balance=32 play.port=0x0 play.avail_ports=0x0 play.seek=0 play.samples=0 play.eof=0 play.pause=0 play.error=0 play.waiting=0 play.open=0 play.active=0 play.buffer_size=65536 play.block_size=8816 play.errors=0 record.rate=44100 record.channels=2 record.precision=16 record.bps=2 record.msb=1 record.encoding=slinear_le record.gain=127 record.balance=32 record.port=0x0 record.avail_ports=0x0 record.seek=0 record.samples=0 record.eof=0 record.pause=0 record.error=0 record.waiting=0 record.open=0 record.active=0 record.buffer_size=65536 record.block_size=8816 record.errors=0 OpenBSD 5.3-stable (GENERIC) #0: Wed Jul 10 23:31:39 PDT 2013 r...@wheeler.lodesertprotosites.org: /usr/src/sys/arch/amd64/compile/GENERIC real mem = 8466853888 (8074MB) avail mem = 8219004928 (7838MB) mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.6 @ 0xdae9c000 (68 entries) bios0: vendor LENOVO version 8DET61WW (1.31 ) date 04/25/2012 bios0: LENOVO 4291X04 acpi0 at bios0: rev 2 acpi0: sleep states S0 S3 S4 S5 acpi0: tables DSDT FACP SLIC SSDT SSDT SSDT HPET APIC MCFG ECDT ASF! TCPA SSDT SSDT UEFI UEFI UEFI acpi0: wakeup devices LID_(S3) SLPB(S3) IGBE(S4) EXP4(S4) EXP7(S4) EHC1(S3) EHC2(S3) HDEF(S4) acpitimer0 at acpi0: 3579545 Hz, 24 bits acpihpet0 at acpi0: 14318179 Hz acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: Intel(R) Core(TM) i7-2640M CPU @ 2.80GHz, 2791.35 MHz cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX ,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,A ES,XSAVE,AVX,NXE,LONG,LAHF,PERF,ITSC cpu0: 256KB 64b/line 8-way L2 cache cpu0: apic clock running at 99MHz cpu at mainbus0: not configured cpu at mainbus0: not configured cpu at mainbus0: not configured ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins acpimcfg0 at acpi0 addr 0xf800, bus 0-63 acpiec0 at acpi0 acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus -1 (PEG_) acpiprt2 at acpi0: bus 2 (EXP1) acpiprt3 at acpi0: bus 3 (EXP2) acpiprt4 at acpi0: bus 5 (EXP4) acpiprt5 at acpi0: bus 13 (EXP5) acpiprt6 at acpi0: bus 14 (EXP7) acpicpu0 at acpi0: C3, C1, PSS acpipwrres0 at acpi0: PUBS acpitz0 at acpi0: critical temperature is 99 degC acpibtn0 at acpi0: LID_ acpibtn1 at acpi0: SLPB acpibat0 at acpi0: BAT0 model 45N1025 serial 910 type LION oem LGC acpibat1 at acpi0: BAT1 not present acpiac0 at acpi0: AC unit online acpithinkpad0 at acpi0 acpidock0 at acpi0: GDCK docked (15) cpu0: Enhanced SpeedStep 2791 MHz: speeds: 2801, 2800, 2600, 2400, 2200, 2000, 1800, 1600, 1400, 1200, 1000, 800 MHz pci0 at mainbus0 bus 0 pchb0 at pci0 dev 0 function 0 Intel Core 2G Host rev 0x09 vga1 at pci0 dev 2 function 0 Intel HD Graphics 3000 rev 0x09 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) intagp0 at vga1 agp0 at intagp0: aperture at 0xe000, size 0x1000 inteldrm0 at vga1: apic 2 int 16 drm0 at inteldrm0 Intel 6 Series MEI rev 0x04 at pci0 dev 22 function 0 not configured puc0 at pci0 dev 22 function 3 Intel 6 Series KT rev 0x04: ports: 1 com com2 at puc0 port 0 apic 2 int 19: ns16550a, 16 byte fifo com2: probed fifo depth: 0 bytes em0 at pci0 dev 25 function 0 Intel 82579LM rev 0x04: msi, address 3c:97:0e:08:67:59 ehci0 at pci0 dev 26 function 0 Intel 6 Series USB rev 0x04: apic 2 int 16 usb0 at ehci0: USB revision 2.0 uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1 azalia0 at pci0 dev 27 function 0 Intel 6 Series HD Audio rev 0x04: msi azalia0: codecs: Conexant/0x506e, Intel/0x2805, using Conexant/0x506e audio0 at azalia0 ppb0 at pci0 dev 28 function 0 Intel 6 Series PCIE rev 0xb4:
Re: USB Audio
On Aug 08 13:16:56, get...@dslextreme.com wrote: I ditched my Mac for good am trying to get everything running that was connected to it. Working on the SoundSticks now. Full dmesg down below. I linked the audio1 devices to audio. $ ls -l /dev/audio* lrwxr-xr-x 1 root wheel11 Aug 7 14:47 /dev/audio - /dev/audio1 lrwxr-xr-x 1 root wheel14 Aug 7 14:48 /dev/audioctl - /dev/audioctl1 lrwxr-xr-x 1 root wheel11 Aug 7 14:48 /dev/mixer - /dev/mixer1 lrwxr-xr-x 1 root wheel11 Aug 7 14:48 /dev/sound - /dev/sound1 audio0 at uhub5 port 1 configuration 1 interface 0 harman/kardon SoundSticks rev 1.10/0.01 addr 8 uaudio0: audio rev 1.00, 6 mixer controls audio1 at uaudio0 This does not correspond with the dmesg below. Why don't you (temporarily) disable azalia in the UKC so that your USB audio device becomes the default? $ cat /projects/Music/scream.aif /dev/sound cat: stdout: Input/output error But my apps like vlc play through internal speakers still just fine. I know the SoundSticks work with OpenBSD so obviously I'm an idiot and missing something. $ audioctl name=USB audio version= config=uaudio encodings=slinear_le:16:2:1,slinear_le:24:3:1 properties=independent full_duplex=0 fullduplex=0 blocksize=8816 hiwat=7 lowat=5 output_muted=0 monitor_gain=0 mode= play.rate=44100 play.channels=2 play.precision=16 play.bps=2 play.msb=1 play.encoding=slinear_le play.gain=127 play.balance=32 play.port=0x0 play.avail_ports=0x0 play.seek=0 play.samples=0 play.eof=0 play.pause=0 play.error=0 play.waiting=0 play.open=0 play.active=0 play.buffer_size=65536 play.block_size=8816 play.errors=0 record.rate=44100 record.channels=2 record.precision=16 record.bps=2 record.msb=1 record.encoding=slinear_le record.gain=127 record.balance=32 record.port=0x0 record.avail_ports=0x0 record.seek=0 record.samples=0 record.eof=0 record.pause=0 record.error=0 record.waiting=0 record.open=0 record.active=0 record.buffer_size=65536 record.block_size=8816 record.errors=0 OpenBSD 5.3-stable (GENERIC) #0: Wed Jul 10 23:31:39 PDT 2013 r...@wheeler.lodesertprotosites.org: /usr/src/sys/arch/amd64/compile/GENERIC real mem = 8466853888 (8074MB) avail mem = 8219004928 (7838MB) mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.6 @ 0xdae9c000 (68 entries) bios0: vendor LENOVO version 8DET61WW (1.31 ) date 04/25/2012 bios0: LENOVO 4291X04 acpi0 at bios0: rev 2 acpi0: sleep states S0 S3 S4 S5 acpi0: tables DSDT FACP SLIC SSDT SSDT SSDT HPET APIC MCFG ECDT ASF! TCPA SSDT SSDT UEFI UEFI UEFI acpi0: wakeup devices LID_(S3) SLPB(S3) IGBE(S4) EXP4(S4) EXP7(S4) EHC1(S3) EHC2(S3) HDEF(S4) acpitimer0 at acpi0: 3579545 Hz, 24 bits acpihpet0 at acpi0: 14318179 Hz acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: Intel(R) Core(TM) i7-2640M CPU @ 2.80GHz, 2791.35 MHz cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX ,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,POPCNT,DEADLINE,A ES,XSAVE,AVX,NXE,LONG,LAHF,PERF,ITSC cpu0: 256KB 64b/line 8-way L2 cache cpu0: apic clock running at 99MHz cpu at mainbus0: not configured cpu at mainbus0: not configured cpu at mainbus0: not configured ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins acpimcfg0 at acpi0 addr 0xf800, bus 0-63 acpiec0 at acpi0 acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus -1 (PEG_) acpiprt2 at acpi0: bus 2 (EXP1) acpiprt3 at acpi0: bus 3 (EXP2) acpiprt4 at acpi0: bus 5 (EXP4) acpiprt5 at acpi0: bus 13 (EXP5) acpiprt6 at acpi0: bus 14 (EXP7) acpicpu0 at acpi0: C3, C1, PSS acpipwrres0 at acpi0: PUBS acpitz0 at acpi0: critical temperature is 99 degC acpibtn0 at acpi0: LID_ acpibtn1 at acpi0: SLPB acpibat0 at acpi0: BAT0 model 45N1025 serial 910 type LION oem LGC acpibat1 at acpi0: BAT1 not present acpiac0 at acpi0: AC unit online acpithinkpad0 at acpi0 acpidock0 at acpi0: GDCK docked (15) cpu0: Enhanced SpeedStep 2791 MHz: speeds: 2801, 2800, 2600, 2400, 2200, 2000, 1800, 1600, 1400, 1200, 1000, 800 MHz pci0 at mainbus0 bus 0 pchb0 at pci0 dev 0 function 0 Intel Core 2G Host rev 0x09 vga1 at pci0 dev 2 function 0 Intel HD Graphics 3000 rev 0x09 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) intagp0 at vga1 agp0 at intagp0: aperture at 0xe000, size 0x1000 inteldrm0 at vga1: apic 2 int 16 drm0 at inteldrm0 Intel 6 Series MEI rev 0x04 at pci0 dev 22 function 0 not configured puc0 at pci0 dev 22 function 3 Intel 6 Series KT rev 0x04: ports: 1 com com2 at puc0 port 0 apic 2 int 19: ns16550a, 16 byte fifo com2: probed fifo depth: 0 bytes em0 at pci0 dev 25 function 0 Intel 82579LM rev 0x04: msi, address 3c:97:0e:08:67:59 ehci0 at pci0 dev 26
Re: 10GbE (Intel X540) performance on OpenBSD 5.3
Thanks to everyone for your advice! I'll try to respond to all the
questions at once and provide some more information about the testing
that I did today.
The BIOS on these firewalls is current. For power-saving options, when
I first configured these systems I tried turning Intel EIST
(SpeedStep) off, but this caused OpenBSD to panic during boot. The
panic text is copied at the end of this message, but the keyboard
didn't work at the ddb prompt (not even Ctrl-Alt-Del), so I couldn't
run any commands. Here's what my performance-related BIOS settings
look like:
Hyper-threading: Disabled
Active Processor Cores: All
Limit CPUID Maximum: Disabled
Execute Disable Bit: Enabled
Intel Virtualization Technology: Disabled
Hardware Prefetcher: Enabled
Adjacent Cache Line Prefetch: Enabled
EIST: Enabled
Turbo Mode: Enabled
CPU C3 Report: Disabled
CPU C6 Report: Disabled
CPU C7 Report: Disabled
VT-d: Disabled
I doubt that disabling EIST would have a significant performance
advantage. Latency may suffer a bit while the CPU raises its frequency
when the traffic hits, but I don't think this would affect throughput
testing. Tomorrow, I'll try disabling other cores and using bsd.sp
kernel to see if that performs any better. Might also play with the
hardware prefetcher settings.
Today, I started testing forwarding performance with pf enabled. I put
the second firewall aside and installed the X540-T2 cards into four
identical Dell OptiPlex 9010 desktops. Two servers (s1 s2) and two
clients (c1 c2). Each pair was connected through a Dell
PowerConnect 8164 10GbE switch to a separate port on the firewall. The
two switches had no other connections. I installed FreeBSD 9.1-RELEASE
amd64 on the desktops.
As a side note, iperf doesn't crash on FreeBSD when running in UDP
mode, so I think it's a problem with the OpenBSD package. For these
tests I stuck with TCP and 1500 MTU. Also, I noticed that a 10 second
test is not always sufficient to get consistent results, so I'm now
running all tests for 60 seconds.
First test is iperf on 127.0.0.1 to compare these desktops with the
11.6 Gbps that I got on the firewall:
# c1: iperf -s
# c1: iperf -c 127.0.0.1 -t 60
[ 3] 0.0-59.9 sec 402 GBytes 57.7 Gbits/sec
That's... a bit faster. The CPU in the desktops is Intel i7-3770,
which is very similar to the Xeon E3-1275v2. Is this a FreeBSD vs
OpenBSD difference?
Second test is c1 - c2 via the 8164 switch (not involving the firewall yet):
# c2: iperf -s
# c1: iperf -c c2 -t 60
[ 4] 0.0-60.1 sec 40.2 GBytes 5.74 Gbits/sec
A single desktop can't saturate the link, at least with the default
settings, but two on each side should be plenty to test the firewall
to its limit.
Third test is c1 - s1 through the firewall with pf stateful filtering:
# s1: iperf -s
# c1: iperf -c s1 -t 60
[ 3] 0.0-60.0 sec 30.0 GBytes 4.29 Gbits/sec
I watched systat and top on the firewall while this test was running.
16k interrupts evenly split between ix0 and ix1, and ~90% interrupt
usage on CPU0.
Fourth test is c1 - s1 and c2 - s2. I used a netcat server on the
firewall (nc -l 1234) to synchronize both clients. They started iperf
as soon as I killed the server with Ctrl-C:
# s1: iperf -s
# s2: iperf -s
# c1: nc gw 1234; iperf -c s1 -t 60
# c2: nc gw 1234; iperf -c s2 -t 60
[ 3] 0.0-60.0 sec 14.4 GBytes 2.07 Gbits/sec
[ 3] 0.0-60.0 sec 15.8 GBytes 2.26 Gbits/sec
An even split of the single client performance, indicating that the
firewall is the bottleneck. No changes in systat and top, so it does
look like the CPU is the limiting factor.
Finally, I used set skip on {ix0, ix1} to disable pf on these two
interfaces and re-ran the same test:
[ 3] 0.0-60.0 sec 18.1 GBytes 2.59 Gbits/sec
[ 3] 0.0-60.0 sec 16.3 GBytes 2.34 Gbits/sec
A small improvement, but I think it's fair to say that pf isn't the problem.
Will do some more testing tomorrow. Here's the boot panic when I
disable SpeedStep in BIOS:
acpiec0 at acpi0: Failed to read resource settings
acpicpu0 at acpi0Store to default type! 100
01a4 Called: \_PR_.CPU0._PDC
arg0: 0x801af588 cnt:01 stk:00 buffer: 0c {01, 00, 00, 00,
01, 00, 00, 00, 3b, 03, 00, 00}
panic: aml_die aml_store:2621
Stopped at Debugger+0x5: leave
Debugger() at Debugger+0x5
panic() at panic+0xe4
_aml_die() at _aml_die+0x183
aml_store() at aml_store+0xbb
aml_parse() at aml_parse+0xcd7
aml_eval() at aml_eval+0x1c8
aml_evalnode() at aml_evalnode+0x63
acpicpu_set_pdc() at acpicpu_set_pdc+0x8c
acpucpu_attach() at acpicpu_attach+0x9e
config_attach() at config_attach+0x1d4
end trace frame: 0x80e6da90, count: 0
Re: 10GbE (Intel X540) performance on OpenBSD 5.3
Apologies for the top posting, please. Interestingly, despite the E3 you're using being a newer chip, and having PCIE 3.0, the systems I'm running on Xeon X5570-based CPUs seem to have a few advantages -- and can push close to 20 Gb in testing scenarios. For example, it looks like the X5570 has better system bus bandwidth and better memory bus bandwidth (ark.intel.com lets you compare chips side by side). Dunno if that means anything, but its interesting. Topping out per 82599 card at ~8k interrupts does not surprise me, as I was unable to get any of mine beyond that. I personally think the 82598 is better under OpenBSD, using about 40% of the interrupts for similar bandwidth. The system showing 90% utilization at 16k interrupts surprises me. My systems showed about 35-40% utilization at 25-30k interrupts. You may want to test jumbo frames, just to see what would happen. I would expect you to see closer to 10 Gb/s with the same number of interrupts. Since I've completely ignored email etiquette tonight, please allow me to snip through here. On 08/08/2013 08:26 PM, Maxim Khitrov wrote: snip The BIOS on these firewalls is current. For power-saving options, when I first configured these systems I tried turning Intel EIST (SpeedStep) off, but this caused OpenBSD to panic during boot. My systems are set to maximum performance at all power savings steppings. I don't know if this is Dell pretending we're all stupid, or if your BIOS has similar settings. snip Active Processor Cores: All I would turn that off, or at least make it only dual core. As a side note, iperf doesn't crash on FreeBSD when running in UDP mode, so I think it's a problem with the OpenBSD package. For these tests I stuck with TCP and 1500 MTU. Also, I noticed that a 10 second test is not always sufficient to get consistent results, so I'm now running all tests for 60 seconds. UDP can be a little iffy. FWIW, it never hurts to verify your tool's results with another tool. I used nuttcp on most of my tests. That's... a bit faster. The CPU in the desktops is Intel i7-3770, which is very similar to the Xeon E3-1275v2. Is this a FreeBSD vs OpenBSD difference? Could be. It might be worth testing FreeBSD on your packet forwarding boxes, just to see if you get similar results. -- -- John Jasen (jja...@realityfailure.org) -- No one will sorrow for me when I die, because those who would -- are dead already. -- Lan Mandragoran, The Wheel of Time, New Spring
Two questions.
Dear OpenBSD developers and users! A voice from deep web welcomes you! I'm not sure if you are aware but very recently FBI finally brought down Freedom hosting. It was a person who was hosting millions of websites for the people, the websites were not ordinary, they were all as illegal as you can imagine, including such as: drug dealer websites where drug manufacturers had direct access with their customers, websites which promotes revolutions and terrorism and – of course websites which share, promote and accept trading of CP (Child Pornography) and many many other things which would be impossible to host on surface web. As far as I know Freedom Hosting used to run OpenBSD only systems, it is unclear that are they got hacked or not, I personally think that other method was used to identify location of servers. You can call me as one of the visitors of such websites and user of most secure OS :) Recent events in deepweb made me think about the future of our freedom. I got couple of questions for whom I can't find an answers, see if you could help if you don't mind. The first one. We all know that the operating system OpenBSD largely depends on lead, so what will happen when time will come for Theo? We all know that so far people do not live thousands of years... I think that not only me would be interesting to know the future of this great project in case something happens. Please do not misunderstand me here, I do not wish anything bad for Theo, I just need to be sure that there are others who could keep project going. 2nd: how would OpenBSD leaders and developers would react, that OS they developing is powering most illegal things which you probably can't dream on? What I'm saying, is it possible that under certain circumstances OpenBSD people could silently include trojan or any other related piece of code which could lead of compromise of machines which are powering deep web ? Thanks for reading. Voice
