From owner-freebsd-ipfw@FreeBSD.ORG Sun Sep 16 16:46:08 2012 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 2D53B106566C for ; Sun, 16 Sep 2012 16:46:08 +0000 (UTC) (envelope-from dreijer@echobit.net) Received: from mail-ob0-f182.google.com (mail-ob0-f182.google.com [209.85.214.182]) by mx1.freebsd.org (Postfix) with ESMTP id D5E748FC12 for ; Sun, 16 Sep 2012 16:46:07 +0000 (UTC) Received: by obbun3 with SMTP id un3so10163980obb.13 for ; Sun, 16 Sep 2012 09:46:06 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type :x-gm-message-state; bh=H54sZj9Tshhc6kqmfZKFfP0Vj+TPYeiPnLI0zT0jhAM=; b=c7O+d+qpMde3vodRR7Cq3oihBnPnQYZ9yHJRaE2uQjP+JcobcLSmpPvkzoWxV1cItR tcbjOecCQvv5CoCTwanMJo4O/XbH0q8bivpRn5DYgSSw8pqGkBs9rERRkFUYZKmpTYXd 7/oSc/9mU7pNLzN/AHdO96sK8zr4I1hrwRdy7ydtSfcPfOkniJzYHyhiN+OSiJlmqWC2 y+IDXC+C0W85c+5Y4jU4X06FyBxDjZu0fLHKQjZHKaA/ytf9Ny2m6vjeVpwJWKlmUinf Xr8huFiYQNHbHU+PLLjAVrBmHIzl5AnZuygpuZzz9RcoV2sXiuHtAE72tmQUb2WHmzlV SosQ== MIME-Version: 1.0 Received: by 10.60.171.69 with SMTP id as5mr9594308oec.100.1347813966099; Sun, 16 Sep 2012 09:46:06 -0700 (PDT) Sender: dreijer@echobit.net Received: by 10.76.99.75 with HTTP; Sun, 16 Sep 2012 09:46:05 -0700 (PDT) In-Reply-To: <20120915034627.V51539@sola.nimnet.asn.au> References: <20120913221758.E51539@sola.nimnet.asn.au> <20120913163013.GA22049@onelab2.iet.unipi.it> <20120913174612.GB22571@onelab2.iet.unipi.it> <20120914144529.R51539@sola.nimnet.asn.au> <20120915034627.V51539@sola.nimnet.asn.au> Date: Sun, 16 Sep 2012 11:46:05 -0500 X-Google-Sender-Auth: erZvGcfuRKXsh101xGqlxyLGOb8 Message-ID: From: Soren Dreijer To: Ian Smith Content-Type: text/plain; charset=ISO-8859-1 X-Gm-Message-State: ALoCoQn6mXSgEvn6T/kteBvwKjLdErGJLuv3JgljgX7D81ADy2kqMaLafxpDhPKMUmitJ0+qMpyS Cc: freebsd-ipfw@freebsd.org, Luigi Rizzo Subject: Re: Significant network latency when using ipfw and in-kernel NAT X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 16 Sep 2012 16:46:08 -0000 Just to follow up on this a bit: I haven't disabled any other options on the NICs yet due to high server load over the weekend, but I'll give it a go in the next few days. Also, it looks like pings to the box are now no longer as fast as I had previously stated. Pinging it from my home connection now yields >3 second roundtrip times, which neatly matches the ping time from the box itself to google.com. As I mentioned before, I'm not sure how e.g. rxcsum and txcsum have anything to do with high latency on ICMP traffic, so I'm wondering if we're perhaps barking up the wrong tree here (especially since forwarded traffic *through* the FreeBSD box seems to work just fine)? Thanks again for helping out here, guys. I'm in pretty deep water when it comes to issues like this one. / Soren On Fri, Sep 14, 2012 at 12:59 PM, Ian Smith wrote: > On Fri, 14 Sep 2012 09:12:27 -0500, Soren Dreijer wrote: > > > Can anybody confirm that disabling these other options (rxcsum, > > txcsum, vlanmtu, vlanhwtag, vlanhwfilter, vlanhwtso) won't cause my > > adapter to lose its connectivity? This is a server in production and > > I'd rather not cause an outage if I can prevent it. :) > > Fair question Soren. I've configured no VLANs; out of my depth, again! > > cheers, Ian > > > On Fri, Sep 14, 2012 at 12:00 AM, Ian Smith wrote: > > > On Thu, 13 Sep 2012 12:37:23 -0500, Soren Dreijer wrote: > > > [Luigi Rizzo wrote:] > > > > > i'd start by disabling all accelerations (and jumobgrams) > > > > > and then move on from the results to figure out where is the problem. > > > > > > > > So, I went ahead and disabled TSO on ix0. That seemed to fix the > > > > intermittent connection issues I had been experiencing with keeping an > > > > XMPP connection alive to one of our internal boxes. It hasn't done > > > > anything for the ICMPs or TCP traffic originating from the FreeBSD > > > > box, of course. > > > > > > Please show ifconfig for ix0 and ix1 again after disabling tso, > > > rxcsum, txcsum, vlanmtu, vlanhwtag, vlanhwfilter, vlanhwtso > > > and any other configured accelerations, as Luigi recommended? > > > > > > Then we'd know if your problem was related to any of that, or not. > > > > > > cheers, Ian > >