Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 18 Nov 2004 01:41:59 +0100
From:      Alex de Kruijff <freebsd@akruijff.dds.nl>
To:        Evgeny Ivanov <evgeny@sofia.itdnet.net>
Cc:        freebsd-ipfw@freebsd.org
Subject:   Re: bandwidth limitations
Message-ID:  <20041118004159.GC1062@Alex.lan>
In-Reply-To: <418766FE.50702@sofia.itdnet.net>
References:  <418766FE.50702@sofia.itdnet.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Nov 02, 2004 at 12:52:46PM +0200, Evgeny Ivanov wrote:
> 
> 
>   HI all,
> 
> 
> I have a problem/question. This is something that I cannot explain to 
> myself why it is happening.
> 
> The machine was originaly installed on 4.9 Stable and was upgrated to 
> 4.10. The IPFW is version 2 - because i needed to use the lookup tables
> and the autonic step change. I use the lookup tables to split the 
> trafffic ( received from IPS for the 3 nets )  into 2 flows - a local 
> one and international. I am doing that by describing the networks into 
> table and then using skipto for sending it to different pipes. I dont 
> use queue becaus it is not working quite well with ipfw2. The rules are 
> like that:

I've had a problem in the pas with Queus on 5.2, but this is now
resolved. I have no problem.
> 
> 00005   180161   262752066 skipto 1100 ip from table(1) to net2 out via fxp2
> 01000    8121      5276242 pipe 1000 ip from any to net2 out via fxp2
> 01100   180161   262752066 pipe 1100 ip from any to net2 out via fxp2
> 65535 88428442 64567418299 allow ip from any to any
> 
> Same is for each other 2 nets. The router/shaper ISP-NIC  has no any 
> limitations. All NICs are fxp's.
> 
> The problem is that I have is that when I load the ipfw rules I cannot 
> use more than 30Mbps received from ISP-NIC. When I flush the rules the 
> speed goes up to 80Mbps.
> 
> Can anyone give an advice why is that? What should I do to use at least 
> 80Mbps after applying the rules?

I'm guessing you are using natd. You could check with top to see if natd
taked up much CPU power. If this is the case then you need to pass less
packets thougth natd.

-- 
Alex

Please copy the original recipients, otherwise I may not read your reply.
WWW: http://www.kruijff.org/alex/FreeBSD/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20041118004159.GC1062>