Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 9 Sep 2004 19:54:26 -0700
From:      Brooks Davis <brooks@one-eyed-alien.net>
To:        jason <jason@ec.rr.com>
Cc:        current@freebsd.org
Subject:   Re: FreeBSD 5.3 Bridge performance take II
Message-ID:  <20040910025425.GA7425@odin.ac.hmc.edu>
In-Reply-To: <4141034C.1080700@ec.rr.com>
References:  <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA0VcX9IoJqUaXPS8MjT1PdsKAAAAQAAAAgcC6P5K6r0GGsZ6hnDUsHgEAAAAA@telia.com> <4141034C.1080700@ec.rr.com>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help

--HcAYCG3uE/tztfnV
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Sep 09, 2004 at 09:28:44PM -0400, jason wrote:
> Daniel Eriksson wrote:
>=20
> >Robert Watson wrote:
> >
> >=20
> >
> >>If you're not already disabling harvesting of entropy on interrupts and
> >>in network processing, you really want to for performance purposes.
> >>  =20
> >>
> >
> >How do I disable this without causing entropy starvation for "typical" u=
se
> >cases (ssl? ssh?)? I googled a bit and found nothing at all about how to
> >disable excessive harvesting.
> >
> ># sysctl -a | grep harvest
> >kern.random.sys.harvest.ethernet: 1
> >kern.random.sys.harvest.point_to_point: 1
> >kern.random.sys.harvest.interrupt: 1
> >kern.random.sys.harvest.swi: 0
> >
> >These are the knobs I know about. Is it enough to turn
> >kern.random.sys.harvest.ethernet and kern.random.sys.harvest.interrupt t=
o=20
> >0,
> >or are there other things I need to do too?
> >
> >/Daniel Eriksson
> >=20
> >
> That is what I did.  I have not bench marked, but I did allot of=20
> searching on the web and reading man pages.  I just can't make the=20
> changes permanent.  When I put them in loader.conf they seem to be=20
> ignored.  Any suggestions to make it stick?

The values are set in the /etc/rc.d/initrandom script.  Add the
following to your rc.conf to diable interrupt and ethernet entropy
gathering:

harvest_interrupt=3D"NO"
harvest_ethernet=3D"NO"

-- Brooks

--=20
Any statement of the form "X is the one, true Y" is FALSE.
PGP fingerprint 655D 519C 26A7 82E7 2529  9BF0 5D8E 8BE9 F238 1AD4

--HcAYCG3uE/tztfnV
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQFBQRdhXY6L6fI4GtQRAm/kAJ4/nv2oxYZ3fed5tBOSAQDUUuzMygCgmO6G
950y8iCJoQivbGYhFmRPIBA=
=leDa
-----END PGP SIGNATURE-----

--HcAYCG3uE/tztfnV--



Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?20040910025425.GA7425>