Date: Fri, 22 Dec 2017 04:48:50 +0700 From: Eugene Grosbein <eugen@grosbein.net> To: Michael Grimm <trashcan@ellael.org>, Kristof Provost <kristof@sigsegv.be> Cc: freebsd-net@freebsd.org, freebsd-jail@FreeBSD.org Subject: Re: performance issue within VNET jail Message-ID: <5A3C2C42.6060904@grosbein.net> In-Reply-To: <BE008733-5AD8-4DAC-A6A5-BC3FCEC16202@ellael.org> References: <4F5EE3F6-0163-4435-8726-56B0D4AE9FAF@ellael.org> <B6446660-9FD2-4C28-A3A2-8AC99624C7FF@sigsegv.be> <8102F5FD-DCFC-4EF8-A443-9E6C9EB1F467@ellael.org> <DB5DE737-7171-4953-AF98-45F1BE7AF09E@sigsegv.be> <BE008733-5AD8-4DAC-A6A5-BC3FCEC16202@ellael.org>
next in thread | previous in thread | raw e-mail | index | archive | help
22.12.2017 4:42, Michael Grimm wrote: > Well I prepared on of my webservers running at hostB/jailX to serve a sample file for local downloading tests: > > 1) hostA wget from hostB/jailX sample file: about 30 MB/s > 2) hostA/jailY wget from hostB/jailX sample file: about 30 MB/s > 3) hostB wget from hostB/jailX sample file: about 190 MB/s > 4) hostB/jailY wget from hostB/jailX sample file: about 190 MB/s > > Hmm. At least tests 3) and 4) omit the pf firewall. Tests 1) qnd 2) include passing two firewalls, one at each host. BUT: Both hosts are connected via an IPSec tunnel, and that's esp not tcp. > > Can anyone draw conclusions from this test? > I cannot ;-) Make sure and double check that your ESP packets do not get fragmented.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5A3C2C42.6060904>