Thank you for advice. :) # Isolation based on Security Groups in Advanced Zone # https://cwiki.apache.org/confluence/display/CLOUDSTACK/Security+Groups+Isolation+in+Advanced+Zone
However, I'm want to improve the speed of StaticNAT in Virtual Router. Trial-1:linux kernel parameter tuning of virural router /etc/sysctl.conf net.core.rmem_max = 16777216 net.core.wmem_max = 16777216 net.ipv4.tcp_rmem = 4096 87380 16777216 net.ipv4.tcp_wmem = 4096 65536 16777216 -> Did not improve performance. :( Trial-2:disabling TSO of virural router /ethtool -K eth0 tso off /ethtool -K eth2 tso off -> Did not improve performance. :( Thanks. -------------------------- Satoru Nakaya 2014-06-24 1:46 GMT+09:00 Nux! <n...@li.nux.ro>: > Depending on your circumstances, you could move to an Advanced Zone with > Security Groups, this way traffic will bypass the Virtual Router and go > directly to the VMs. > > HTH > Lucian > > > -- > Sent from the Delta quadrant using Borg technology! > > Nux! > www.nux.ro > > > ----- Original Message ----- > From: "giraffeg forestg" <giraffefore...@gmail.com> > To: users@cloudstack.apache.org > Sent: Monday, 23 June, 2014 4:51:49 PM > Subject: Performance degrades when I use the StaticNAT in Virtual Router. > Is there a way to speed up? > > Hi All > > Performance degrades when I use the StaticNAT in Virtual Router. Is there a > way to speed up? > > Environment: > Apache CloudStack 4.3.0 > SystemVM:systemvm64template-2014-01-14-master-xen.vhd > HyperVisor:XenServer 6.2SP1 > Network:1Gbps (Catalyst3550-12G) > > System Offering: > CPU:2000 MHz > Memory:2048 MB > Network Rate:10000 MB > > Network Offering: > Network Rate:10000 MB > > > (Case-1, Direct Access) Good > PhysicalServer--->VM Instance1 > # ./nuttcp 192.168.11.2 > 1122.3928 MB / 10.07 sec = 935.0451 Mbps 4 %TX 59 %RX 0 retrans 0.93 > msRTT > > > (Case-2, VirtualRouter SourceNAT) Good > VM Instance2--->VirtualRouter--->PhysicalServer > # ./nuttcp 192.168.11.248 > 1123.1641 MB / 10.03 sec = 938.9331 Mbps 12 %TX 15 %RX 0 retrans 3.11 > msRTT > > > (Case-3, VirtualRouter StaticNAT) Not Good > PhysicalServer--->VirtualRouter--->VM Instance2 > # ./nuttcp 192.168.11.173 > 738.0000 MB / 10.01 sec = 618.6374 Mbps 2 %TX 48 %RX 0 retrans 2.84 > msRTT > > > Thanks. > > -------------------------- > Satoru Nakaya >
