Poor CARP Interface Performance with NAT

2014-01-21 Thread Gabriel Kuri
I am running obsd 5.4 as my NAT router. I decided to setup a second obsd box and run carp between the two for the external NATed interface (facing the ISP). After I setup everything and switched pf to NAT using the address on the carp interface, I'm seeing about 12Mbps - 13Mbps on the download, I h

Re: Poor CARP Interface Performance with NAT

2014-01-21 Thread Gabriel Kuri
Also, in case it might help, here's the dmesg output and appropriate hostname.* files from the primary (master): dmesg: OpenBSD 5.4 (GENERIC.MP) #41: Tue Jul 30 15:30:02 MDT 2013 dera...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 2119761920 (2021MB) avail mem = 20

Re: Poor CARP Interface Performance with NAT

2014-01-21 Thread mxb
You PF rules are needed too for this. On 22 jan 2014, at 00:51, Gabriel Kuri wrote: > I am running obsd 5.4 as my NAT router. I decided to setup a second obsd > box and run carp between the two for the external NATed interface (facing > the ISP). After I setup everything and switched pf to NAT u

Re: Poor CARP Interface Performance with NAT

2014-01-22 Thread Gabriel Kuri
Here it is. em0 - external interface (facing ISP) em1 - internal interface, layer3, (facing switch running OSPF) em4 - pfsync interface pf.conf: tcpflags = "S/SA" # macros ext_if = "em0" carp_ip = "" int_nets = "{ }" router = "" # reject = black hole table file "/etc/pf/reject" # nat/rd

Re: Poor CARP Interface Performance with NAT

2014-01-23 Thread Andy
Can't see anything immediatly wrong with this but their are a few things you could change/improve; # Why are you setting the tcpflags. The defaults are fine and usualy better.. And keep state is the default tcpflags = "S/SA" # macros ext_if = "em0" carp_ip = "" int_nets = "{ }" router = ""

Re: Poor CARP Interface Performance with NAT

2014-01-28 Thread Paul B. Henson
On Tue, Jan 21, 2014 at 03:51:23PM -0800, Gabriel Kuri wrote: > I am running obsd 5.4 as my NAT router. I decided to setup a second obsd > box and run carp between the two for the external NATed interface (facing > the ISP). After I setup everything and switched pf to NAT using the address > on the