From owner-freebsd-stable@FreeBSD.ORG Tue Apr 25 17:02:02 2006 Return-Path: X-Original-To: stable@freebsd.org Delivered-To: freebsd-stable@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3598716A401 for ; Tue, 25 Apr 2006 17:02:02 +0000 (UTC) (envelope-from Stephen.Clark@seclark.us) Received: from smtpout08-04.prod.mesa1.secureserver.net (smtpout08-04.prod.mesa1.secureserver.net [64.202.165.12]) by mx1.FreeBSD.org (Postfix) with SMTP id B7EB343D48 for ; Tue, 25 Apr 2006 17:02:01 +0000 (GMT) (envelope-from Stephen.Clark@seclark.us) Received: (qmail 2408 invoked from network); 25 Apr 2006 17:02:01 -0000 Received: from unknown (24.144.77.138) by smtpout08-04.prod.mesa1.secureserver.net (64.202.165.12) with ESMTP; 25 Apr 2006 17:02:01 -0000 Message-ID: <444E5608.4050704@seclark.us> Date: Tue, 25 Apr 2006 13:02:00 -0400 From: Stephen Clark User-Agent: Mozilla/5.0 (X11; U; Linux 2.2.16-22smp i686; en-US; m18) Gecko/20010110 Netscape6/6.5 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Mike Tancsa References: <444E2503.9090506@seclark.us> <6.2.3.4.0.20060425093417.068dfc08@64.7.153.2> In-Reply-To: <6.2.3.4.0.20060425093417.068dfc08@64.7.153.2> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Cc: stable@freebsd.org Subject: Re: Freebsd Stable 6.x ipsec slower than with 4.9 X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Stephen.Clark@seclark.us List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 25 Apr 2006 17:02:02 -0000 Mike Tancsa wrote: >At 09:32 AM 25/04/2006, Stephen Clark wrote: > > >>Hello List, >> >>I have to dualcore Athlon 64 4800+ systems. Initially I was running >>4.9 on both of them an was able to get 54mbits thru direct connected >>realtek 10/100 cards as measured by nttcp. >> >>I put stable on one of the system and now can on get 37mbits as >>measured by nttcp when going thru an ipsec tunnel. >> >> > >Try first >sysctl -w net.inet.tcp.inflight.enable=0 > >If its still slower, try using FAST_IPSEC instead on the >server. However, make sure you disable INET6 > > ---Mike > > > > That increased it to 39mbits/sec. Still far from 54mbits/sec -- "They that give up essential liberty to obtain temporary safety, deserve neither liberty nor safety." (Ben Franklin) "The course of history shows that as a government grows, liberty decreases." (Thomas Jefferson)