On Sun, Mar 22, 2009 at 3:32 PM, Lenny <five2one.le...@gmail.com> wrote: > > Hi Bill, > > ok, thanks. > > So as I understand it, in my production environment I will not be able to > get more than say 150-200kpps even if I had the best CPU available on the
You should be able to hit much more than that. One other item of interest is that PF itself is still under the Giant lock and can't take advantage of SMP. Since a good amount of cycles are spent in PF, it's important to keep in mind - we'll never come close to FreeBSDs raw routing performances due to that alone. > market today? Which, by the way, equals around 450-600Mb in my case. And > that is for dual port NIC, of course. > > Also, I was wondering, how do the lab tests differ from production > environment? How is it possible that in the lab you can get 5 times more > than in production? (you said it yourself - you could only reach 80kpps > there, while in the lab you got 400). Unless I miss something. To be clear, on the older Xeons, we could only hit around 150kpps in the lab (optimistic conditions - 64byte udp). The newer Xeons hit 400kpps, the newer Opterons 600kpps+. In production, we were running the old Xeons at 80kpps (or so) at about 100% utilization (these boxes handle "real" traffic, ie TCP, which eats more cpu). given the disparity between test and prod at about a 50% hit, our new boxes should easily hit 300kpps. > Oh, and one last thing, since you mentioned FreeBSD 8.0, would you recommend > trying the pfSense 2.0 in production and will it actually solve the > threading problem? pfSense 2.0 is still on the FreeBSD 7.x series - it's not known if it'll move to 8 yet. > I know, I'm being a real pain here, but you would not believe how I struggle > to get the pfSense in production and show everyone that it can be done > without spending a fortune on some proprietary solution. I already have it > in all the other projects(which is about 5), this one is a real tough one... > But I absolutely love it, that's for sure. Can you clarify again which CPUs are in your test boxes? Info from dmesg would be perfect. --Bill --------------------------------------------------------------------- To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
