Depending on your circumstances, you could move to an Advanced Zone with Security Groups, this way traffic will bypass the Virtual Router and go directly to the VMs.
HTH Lucian -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro ----- Original Message ----- From: "giraffeg forestg" <giraffefore...@gmail.com> To: users@cloudstack.apache.org Sent: Monday, 23 June, 2014 4:51:49 PM Subject: Performance degrades when I use the StaticNAT in Virtual Router. Is there a way to speed up? Hi All Performance degrades when I use the StaticNAT in Virtual Router. Is there a way to speed up? Environment: Apache CloudStack 4.3.0 SystemVM:systemvm64template-2014-01-14-master-xen.vhd HyperVisor:XenServer 6.2SP1 Network:1Gbps (Catalyst3550-12G) System Offering: CPU:2000 MHz Memory:2048 MB Network Rate:10000 MB Network Offering: Network Rate:10000 MB (Case-1, Direct Access) Good PhysicalServer--->VM Instance1 # ./nuttcp 192.168.11.2 1122.3928 MB / 10.07 sec = 935.0451 Mbps 4 %TX 59 %RX 0 retrans 0.93 msRTT (Case-2, VirtualRouter SourceNAT) Good VM Instance2--->VirtualRouter--->PhysicalServer # ./nuttcp 192.168.11.248 1123.1641 MB / 10.03 sec = 938.9331 Mbps 12 %TX 15 %RX 0 retrans 3.11 msRTT (Case-3, VirtualRouter StaticNAT) Not Good PhysicalServer--->VirtualRouter--->VM Instance2 # ./nuttcp 192.168.11.173 738.0000 MB / 10.01 sec = 618.6374 Mbps 2 %TX 48 %RX 0 retrans 2.84 msRTT Thanks. -------------------------- Satoru Nakaya