From owner-freebsd-current@FreeBSD.ORG  Fri Sep 10 01:28:29 2004
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 6634B16A530; Fri, 10 Sep 2004 01:28:29 +0000 (GMT)
Received: from ms-smtp-04-eri0.southeast.rr.com
	(ms-smtp-04-lbl.southeast.rr.com [24.25.9.103])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id C09CE43D1F; Fri, 10 Sep 2004 01:28:28 +0000 (GMT)
	(envelope-from jason@ec.rr.com)
Received: from [192.168.1.101] (cpe-065-184-172-100.ec.rr.com
	[65.184.172.100])i8A1SPSG007047;	Thu, 9 Sep 2004 21:28:25 -0400 (EDT)
Message-ID: <4141034C.1080700@ec.rr.com>
Date: Thu, 09 Sep 2004 21:28:44 -0400
From: jason <jason@ec.rr.com>
User-Agent: Mozilla Thunderbird 0.7.3 (X11/20040808)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Daniel Eriksson <daniel_k_eriksson@telia.com>
References: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA0VcX9IoJqUaXPS8MjT1PdsKAAAAQAAAAgcC6P5K6r0GGsZ6hnDUsHgEAAAAA@telia.com>
In-Reply-To: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA0VcX9IoJqUaXPS8MjT1PdsKAAAAQAAAAgcC6P5K6r0GGsZ6hnDUsHgEAAAAA@telia.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: Symantec AntiVirus Scan Engine
cc: 'Robert Watson' <rwatson@freebsd.org>
cc: current@freebsd.org
Subject: Re: FreeBSD 5.3 Bridge performance take II
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 10 Sep 2004 01:28:29 -0000

Daniel Eriksson wrote:

>Robert Watson wrote:
>
>  
>
>>If you're not already disabling harvesting of entropy on interrupts and
>>in network processing, you really want to for performance purposes.
>>    
>>
>
>How do I disable this without causing entropy starvation for "typical" use
>cases (ssl? ssh?)? I googled a bit and found nothing at all about how to
>disable excessive harvesting.
>
># sysctl -a | grep harvest
>kern.random.sys.harvest.ethernet: 1
>kern.random.sys.harvest.point_to_point: 1
>kern.random.sys.harvest.interrupt: 1
>kern.random.sys.harvest.swi: 0
>
>These are the knobs I know about. Is it enough to turn
>kern.random.sys.harvest.ethernet and kern.random.sys.harvest.interrupt to 0,
>or are there other things I need to do too?
>
>/Daniel Eriksson
>  
>
That is what I did.  I have not bench marked, but I did allot of 
searching on the web and reading man pages.  I just can't make the 
changes permanent.  When I put them in loader.conf they seem to be 
ignored.  Any suggestions to make it stick?

Jason