Re: Not getting much bandwidth through the firewall

2007-03-30 Thread Steven Harms
I would check your testing methodologies, there is no way a system from the
last 10 years can't handle 1Mbps.  Maybe you can tell us which tests you are

running?

On 3/30/07, Ted Unangst <[EMAIL PROTECTED]> wrote:
>
> On 3/29/07, Siju George <[EMAIL PROTECTED]> wrote:
> > I have an Internet Connection 1Mbps.
> > If I connect a Windows XP tp it I get about 800Kbps Speed but on
> > OpenBSD it never Goes beyond 380Kbps.
> >
> > I have another ISP with 1 Mbps Speed Connection.
> > Both Windows XP and OpenBSD shows aroungd 800 Kbps Speed when
> > Connected Directly to it.
> >
> > So was just wondering what the cause is :-)
> > Just wondering if
> >
> > Increasing net.inet.tcp.{send,recv}space.
> >
> > would solve the problem.
>
> possibly.  all i know is my computers work plenty fast without
> fiddling with the knobs.  you know you could have increased the sysctl
> and tested it a lot faster than waiting for an email back?



Re: Not getting much bandwidth through the firewall

2007-03-30 Thread Ted Unangst

On 3/29/07, Siju George <[EMAIL PROTECTED]> wrote:

I have an Internet Connection 1Mbps.
If I connect a Windows XP tp it I get about 800Kbps Speed but on
OpenBSD it never Goes beyond 380Kbps.

I have another ISP with 1 Mbps Speed Connection.
Both Windows XP and OpenBSD shows aroungd 800 Kbps Speed when
Connected Directly to it.

So was just wondering what the cause is :-)
Just wondering if

Increasing net.inet.tcp.{send,recv}space.

would solve the problem.


possibly.  all i know is my computers work plenty fast without
fiddling with the knobs.  you know you could have increased the sysctl
and tested it a lot faster than waiting for an email back?



Re: Not getting much bandwidth through the firewall

2007-03-29 Thread Siju George

On 3/30/07, Ted Unangst <[EMAIL PROTECTED]> wrote:

On 3/29/07, Siju George <[EMAIL PROTECTED]> wrote:
> On 3/29/07, Kyle George <[EMAIL PROTECTED]> wrote:
> > On Wed, 28 Mar 2007, Watson Crick wrote:
> >
> > > I've got OpenBSD 4.0 (release) on a laptop setup up as a router between
> > > 2 subnets, and providing internet access through a 3rd nic to a DSL
> > > modem. The problem is the bandwidth between the two subnets.  I'm only
> > > getting a maximum of about 500 KB/s between two 100mbit cards. Top

> If you have an ISP that gives you IP aadrees ( using PPPOE ) it there
> a way to measure or detect the valuse on the ISP's side?

why the hell does the isp matter routing when between two local subnets?



:-) I was asking another thing

I have an Internet Connection 1Mbps.
If I connect a Windows XP tp it I get about 800Kbps Speed but on
OpenBSD it never Goes beyond 380Kbps.

I have another ISP with 1 Mbps Speed Connection.
Both Windows XP and OpenBSD shows aroungd 800 Kbps Speed when
Connected Directly to it.

So was just wondering what the cause is :-)
Just wondering if

Increasing net.inet.tcp.{send,recv}space.

would solve the problem.

Thanks tedu for your response :-)

Kind Regards

Siju



Re: Not getting much bandwidth through the firewall

2007-03-29 Thread Stefan Kell
Hi,

 Original-Nachricht 
Datum: Wed, 28 Mar 2007 20:30:39 -0700 (PDT)
Von: Watson Crick <[EMAIL PROTECTED]>
An: misc@openbsd.org
Betreff: Not getting much bandwidth through the firewall

> Hi,
> 
> I've got OpenBSD 4.0 (release) on a laptop setup up as a router between 2
> subnets, and providing internet access through a 3rd nic to a DSL modem.
> The problem is the bandwidth between the two subnets.  I'm only getting a
> maximum of about 500 KB/s between two 100mbit cards.
> Top shows ~70% interrupt (~29% idle) while these transfers are going on.
> I don't know what the bottleneck is in the system.  Are the Linksys PCMCIA
> nics crappy? Did I screw something else up?
> 
> As a test I turned off pf and did ftp transfers from the OpenBSD machine
> to/from each subnet, and the bandwidth was still limited to ~500 KB/s, so I
> don't think it's anything in my pf setup.
> 
> Thanks  
> 

There is a big difference in performance between 16bit and 32bit PCMCIA-Cards. 
From my experience you won't get anything higher as 1000KByte/sec from a 16bit 
card. I don't know the linksys cards but you should test your setup with two 
32bit cards. And this has probably nothing to do with operating systems.

Regards

Stefan Kell



Re: Not getting much bandwidth through the firewall

2007-03-29 Thread Ted Unangst

On 3/29/07, Siju George <[EMAIL PROTECTED]> wrote:

On 3/29/07, Kyle George <[EMAIL PROTECTED]> wrote:
> On Wed, 28 Mar 2007, Watson Crick wrote:
>
> > I've got OpenBSD 4.0 (release) on a laptop setup up as a router between
> > 2 subnets, and providing internet access through a 3rd nic to a DSL
> > modem. The problem is the bandwidth between the two subnets.  I'm only
> > getting a maximum of about 500 KB/s between two 100mbit cards. Top



If you have an ISP that gives you IP aadrees ( using PPPOE ) it there
a way to measure or detect the valuse on the ISP's side?


why the hell does the isp matter routing when between two local subnets?



Re: Not getting much bandwidth through the firewall

2007-03-29 Thread Henning Brauer
* Bryan Irvine <[EMAIL PROTECTED]> [2007-03-29 21:11]:
> >The send and receive socket buffer space has nothing to do with forwarding
> >performance. This will only affect connections from and to the box itself.
> 
> but don't routed packets go to and from the box itself?

they don't go to or thru the socket buffers you increased.

-- 
Henning Brauer, [EMAIL PROTECTED], [EMAIL PROTECTED]
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting - Hamburg & Amsterdam



Re: Not getting much bandwidth through the firewall

2007-03-29 Thread Bryan Irvine

The send and receive socket buffer space has nothing to do with forwarding
performance. This will only affect connections from and to the box itself.


but don't routed packets go to and from the box itself?

My download speeds on my mythtv/ubuntu system jumped from 1.5Mb/s to
12Mb/s after increasing those on my firewall.


I think the bigger problem are the PCMCIA nics. PCMCIA is a slow bus
comparable to ISA and most PCMCIA cards are evil old clones of already
terrible MAC chips. Also check the duplex mode -- autonegotiation can
fail with older cards.


I tend to agree that the problem is likely here.  Laptops tend to not
have superfast bus speeds.

I also wonder if he actually meant that capital B.  500KB isn't too
shabby (what's that 4Mb?) while 500Kb isn't so good.  If he's actually
pushing 4Mb through his laptops crappy old pcmcia that may be as good
as it gets.

--Bryan



Re: Not getting much bandwidth through the firewall

2007-03-29 Thread Stuart Henderson
On 2007/03/29 22:55, Siju George wrote:
> On 3/29/07, Kyle George <[EMAIL PROTECTED]> wrote:
> >On Wed, 28 Mar 2007, Watson Crick wrote:
> >
> >> I've got OpenBSD 4.0 (release) on a laptop setup up as a router between
> >> 2 subnets, and providing internet access through a 3rd nic to a DSL
> >> modem. The problem is the bandwidth between the two subnets.  I'm only
> >> getting a maximum of about 500 KB/s between two 100mbit cards. Top shows
> >> ~70% interrupt (~29% idle) while these transfers are going on. I don't
> >> know what the bottleneck is in the system.  Are the Linksys PCMCIA nics
> >> crappy? Did I screw something else up?
> >
> >Try http://www.openbsd.org/faq/faq6.html#Tuning.
> >
> >Increase net.inet.tcp.{send,recv}space.
> >
> 
> It says
> 
>  "You would normally use this to allow for routing or connection
> problems. Of course, for it to be most effective, both sides of the
> connection need to use similar values."
> 
> If you have an ISP that gives you IP aadrees ( using PPPOE ) it there
> a way to measure or detect the valuse on the ISP's side?

The ISP don't normally have anything to do with this (excepting any
connections to their servers) (but see below about proxies). The relevant
settings are those on the endpoints of the TCP connection.

You might want to increase {send,recv}space if you have a connection
which has high bandwidth *and* high latency (i.e. ping times). But
it will only make a difference when you connect to servers which also
have high window sizes configured; often busy servers don't since it
increases the memory requirements.

If you're interested to see how altering this looks from the
perspective of network packets, run tcpdump(8) and watch how the
values in TCP SYN packets change as you vary the sysctl values
and make connections.

If there is a proxy in the path between you and the "real"
endpoint, the TCP endpoints are then your machine and that proxy.
In those cases, the ISP (or whoever) does have control over these
tuning parameters.



Re: Not getting much bandwidth through the firewall

2007-03-29 Thread Siju George

On 3/29/07, Kyle George <[EMAIL PROTECTED]> wrote:

On Wed, 28 Mar 2007, Watson Crick wrote:

> I've got OpenBSD 4.0 (release) on a laptop setup up as a router between
> 2 subnets, and providing internet access through a 3rd nic to a DSL
> modem. The problem is the bandwidth between the two subnets.  I'm only
> getting a maximum of about 500 KB/s between two 100mbit cards. Top shows
> ~70% interrupt (~29% idle) while these transfers are going on. I don't
> know what the bottleneck is in the system.  Are the Linksys PCMCIA nics
> crappy? Did I screw something else up?

Try http://www.openbsd.org/faq/faq6.html#Tuning.

Increase net.inet.tcp.{send,recv}space.



It says

 "You would normally use this to allow for routing or connection
problems. Of course, for it to be most effective, both sides of the
connection need to use similar values."

If you have an ISP that gives you IP aadrees ( using PPPOE ) it there
a way to measure or detect the valuse on the ISP's side?

The main problem being the support personnel mostly doesnot know these
things :-(

Thankyou so much

kind regards

Siju



Re: Not getting much bandwidth through the firewall

2007-03-29 Thread Claudio Jeker
On Thu, Mar 29, 2007 at 02:18:30AM -0400, Kyle George wrote:
> On Wed, 28 Mar 2007, Watson Crick wrote:
> 
> >I've got OpenBSD 4.0 (release) on a laptop setup up as a router between 
> >2 subnets, and providing internet access through a 3rd nic to a DSL 
> >modem. The problem is the bandwidth between the two subnets.  I'm only 
> >getting a maximum of about 500 KB/s between two 100mbit cards. Top shows 
> >~70% interrupt (~29% idle) while these transfers are going on. I don't 
> >know what the bottleneck is in the system.  Are the Linksys PCMCIA nics 
> >crappy? Did I screw something else up?
> 
> Try http://www.openbsd.org/faq/faq6.html#Tuning.
> 
> Increase net.inet.tcp.{send,recv}space.
> 
> Try this before worrying about your hardware.
> 

The send and receive socket buffer space has nothing to do with forwarding
performance. This will only affect connections from and to the box itself.

I think the bigger problem are the PCMCIA nics. PCMCIA is a slow bus
comparable to ISA and most PCMCIA cards are evil old clones of already
terrible MAC chips. Also check the duplex mode -- autonegotiation can
fail with older cards.

-- 
:wq Claudio



Re: Not getting much bandwidth through the firewall

2007-03-28 Thread Kyle George

On Wed, 28 Mar 2007, Watson Crick wrote:

I've got OpenBSD 4.0 (release) on a laptop setup up as a router between 
2 subnets, and providing internet access through a 3rd nic to a DSL 
modem. The problem is the bandwidth between the two subnets.  I'm only 
getting a maximum of about 500 KB/s between two 100mbit cards. Top shows 
~70% interrupt (~29% idle) while these transfers are going on. I don't 
know what the bottleneck is in the system.  Are the Linksys PCMCIA nics 
crappy? Did I screw something else up?


Try http://www.openbsd.org/faq/faq6.html#Tuning.

Increase net.inet.tcp.{send,recv}space.

Try this before worrying about your hardware.

--
Kyle George



Not getting much bandwidth through the firewall

2007-03-28 Thread Watson Crick
Hi,

I've got OpenBSD 4.0 (release) on a laptop setup up as a router between 2 
subnets, and providing internet access through a 3rd nic to a DSL modem.
The problem is the bandwidth between the two subnets.  I'm only getting a 
maximum of about 500 KB/s between two 100mbit cards.
Top shows ~70% interrupt (~29% idle) while these transfers are going on.
I don't know what the bottleneck is in the system.  Are the Linksys PCMCIA nics 
crappy? Did I screw something else up?

As a test I turned off pf and did ftp transfers from the OpenBSD machine 
to/from each subnet, and the bandwidth was still limited to ~500 KB/s, so I 
don't think it's anything in my pf setup.

Thanks  




# dmesg
OpenBSD 4.0 (GENERIC) #1107: Sat Sep 16 19:15:58 MDT 2006
[EMAIL PROTECTED]:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel(R) Pentium(R) III Mobile CPU 1000MHz ("GenuineIntel" 686-class) 1 
GHz
cpu0: 
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE
real mem  = 536350720 (523780K)
avail mem = 481308672 (470028K)
using 4256 buffers containing 26918912 bytes (26288K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(00) BIOS, date 12/21/01, BIOS32 rev. 0 @ 0xffe90, 
SMBIOS rev. 2.3 @ 0xf6f20 (60 entries)
bios0: Dell Computer Corporation Inspiron 8100
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
apm0: flags 30102 dobusy 0 doidle 1
pcibios0 at bios0: rev 2.1 @ 0xf/0x1
pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xfbc20/192 (10 entries)
pcibios0: PCI Interrupt Router at 000:31:0 ("Intel 82371 ISA and IDE" rev 0x00)
pcibios0: PCI bus #4 is the last bus
bios0: ROM list: 0xc/0xe000 0xce000/0x800! 0xce800/0x800! 0xcf000/0x800! 
0xcf800/0x800!
cpu0 at mainbus0
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Intel 82815 Hub" rev 0x04
ppb0 at pci0 dev 1 function 0 "Intel 82815 AGP" rev 0x04
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 "NVIDIA GeForce2 Go" rev 0xb2
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
ppb1 at pci0 dev 30 function 0 "Intel 82801BAM Hub-to-PCI" rev 0x03
pci2 at ppb1 bus 2
esa0 at pci2 dev 3 function 0 "ESS Maestro 3" rev 0x10: irq 5
ac97: codec id 0x83847609 (SigmaTel STAC9721/23)
ac97: codec features 18 bit DAC, 18 bit ADC, SigmaTel 3D
audio0 at esa0
xl0 at pci2 dev 6 function 0 "3Com 3c556 100Base-TX" rev 0x10: irq 10, address 
00:04:76:4f:21:30
tqphy0 at xl0 phy 0: 78Q2120 10/100 PHY, rev. 11
"3Com V.90 Modem" rev 0x10 at pci2 dev 6 function 1 not configured
cbb0 at pci2 dev 15 function 0 "TI PCI4451 CardBus" rev 0x00: irq 10
cbb1 at pci2 dev 15 function 1 "TI PCI4451 CardBus" rev 0x00: irq 10
"TI PCI4451 FireWire" rev 0x00 at pci2 dev 15 function 2 not configured
cardslot0 at cbb0 slot 0 flags 0
cardbus0 at cardslot0: bus 3 device 0 cacheline 0x8, lattimer 0x20
pcmcia0 at cardslot0
cardslot1 at cbb1 slot 1 flags 0
cardbus1 at cardslot1: bus 4 device 0 cacheline 0x8, lattimer 0x20
pcmcia1 at cardslot1
ichpcib0 at pci0 dev 31 function 0 "Intel 82801BAM LPC" rev 0x03
pciide0 at pci0 dev 31 function 1 "Intel 82801BAM IDE" rev 0x03: DMA, channel 0 
wired to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: 
wd0: 16-sector PIO, LBA, 28615MB, 58605120 sectors
atapiscsi0 at pciide0 channel 0 drive 1
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0:  SCSI0 5/cdrom removable
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5
cd0(pciide0:0:1): using PIO mode 4, Ultra-DMA mode 2
pciide0: channel 1 ignored (disabled)
uhci0 at pci0 dev 31 function 2 "Intel 82801BA USB" rev 0x03: irq 10
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: Intel UHCI root hub, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
isa0 at ichpcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pms0 at pckbc0 (aux slot)
pckbc0: using irq 12 for aux slot
wsmouse0 at pms0 mux 0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: 
spkr0 at pcppi0
npx0 at isa0 port 0xf0/16: using exception 16
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
fd1 at fdc0 drive 1: density unknown
biomask efdd netmask efdd ttymask ffdf
pctr: 686-class user-level performance counters enabled
mtrr: Pentium Pro MTRR support
ne3 at pcmcia0 function 0 "Linksys, EtherFast 10/100 PC Card (PCMPC100 V2), 
V2.0" port 0xa000/32, address 00:e0:98:85:dd:57
nsphyter0 at ne3 phy 4: DP83815 10/100 PHY, rev. 0
ne4 at pcmcia1 function 0 "Linksys, EtherFast 10/100 PC Card (PCMPC100 V2), 
V2.0" port 0xa040/32, address 00:e0:98:88:5f:c6
nsphyter1 at ne4 phy 4: DP83815 10/100 PHY, rev. 0
uaudio0 at uhub0 port 2 configuration 1 interface 1: Logitech QuickCam Pro 
3000, rev 1.10/0.02, addr 2
uaudio0: audio rev 1.00, 2 mixer controls
audio1 at uaudio0
dkcsum: wd0 matches BIOS drive 0x80
root on wd0a
rootdev=0