From owner-freebsd-stable@FreeBSD.ORG Thu Jan 27 17:55:53 2011 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DE795106566B; Thu, 27 Jan 2011 17:55:53 +0000 (UTC) (envelope-from ml@my.gd) Received: from mail-ww0-f50.google.com (mail-ww0-f50.google.com [74.125.82.50]) by mx1.freebsd.org (Postfix) with ESMTP id 52D388FC18; Thu, 27 Jan 2011 17:55:52 +0000 (UTC) Received: by wwf26 with SMTP id 26so2279257wwf.31 for ; Thu, 27 Jan 2011 09:55:52 -0800 (PST) Received: by 10.227.128.21 with SMTP id i21mr1404334wbs.219.1296150952014; Thu, 27 Jan 2011 09:55:52 -0800 (PST) Received: from dfleuriot.local ([83.167.62.196]) by mx.google.com with ESMTPS id f35sm11983913wbf.14.2011.01.27.09.55.39 (version=SSLv3 cipher=RC4-MD5); Thu, 27 Jan 2011 09:55:41 -0800 (PST) Message-ID: <4D41B197.6070308@my.gd> Date: Thu, 27 Jan 2011 18:55:35 +0100 From: Damien Fleuriot User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.13) Gecko/20101207 Thunderbird/3.1.7 MIME-Version: 1.0 To: "Vogel, Jack" References: <4D41417A.20904@my.gd> <20110127172724.GA36587@icarus.home.lan> <4D41ABF1.1010405@my.gd> <1DB50624F8348F48840F2E2CF6040A9D014BEB8833@orsmsx508.amr.corp.intel.com> In-Reply-To: <1DB50624F8348F48840F2E2CF6040A9D014BEB8833@orsmsx508.amr.corp.intel.com> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: "freebsd-stable@freebsd.org" , Jeremy Chadwick , "freebsd-pf@freebsd.org" Subject: Re: High interrupt rate on a PF box + performance X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Jan 2011 17:55:54 -0000 On 1/27/11 6:41 PM, Vogel, Jack wrote: > Jeremy is right, if you have a problem the first step is to try the latest code. > > However, when I look at the interrupts below I don't see what the problem is? > The Broadcom seems to have about the same rate, it just doesn't have MSIX (multiple vectors). > > Jack > > My main concern is that the CPU %interrupt is quite high, also, we seem to be experiencing input errors on the interfaces. See for yourself the following munin graphs: http://my.gd/fw_graphs/ igb0 = WAN interf bce0 = LAN Obviously we've had quite a traffic increase since the beginning of the year, as shown by the PF statistics. But jeez, the CPU %interrupt doubled or tripled... You'll notice a drop in graphs between 23 and 25 january, this is when we switched the CARP master to the backup firewall.