Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 16 Dec 2003 04:39:42 -0800 (PST)
From:      Julian Elischer <julian@elischer.org>
To:        Andriy Korud <akorud@polynet.lviv.ua>
Cc:        freebsd-net@freebsd.org
Subject:   Re: Large scale NAT problems
Message-ID:  <Pine.BSF.4.21.0312160439180.39201-100000@InterJet.elischer.org>
In-Reply-To: <1071564482.3fdec6c2ac5fb@isp.polynet.lviv.ua>

next in thread | previous in thread | raw e-mail | index | archive | help
did you try natd?
(for comparison)

On Tue, 16 Dec 2003, Andriy Korud wrote:

> Hi,
> I'm tring to make NAT on FreeBSD box for 2500 clients on 35Mbit uplink.
> Box is Xeon 2.8GHz, 1G RAM, 2xIntel PRO/1000 (em) adapters.
> FreeBSD 4.9-STABLE, kernel is configured for single processor (HT not used),
> with DEVICE_POLLING and HZ=2000, LARGE_NAT defined.
> Nat was done using ipnat, no additional filtering.
> 
> The problem is that when traffic grows to 10Mbit and number of active NAT
> sessions reach 70000, CPU usage exponentialy grows and system spends all CPU
> time in interrupts handling. 
> The system become completely unreponsible and unsable and only hard reset is the
> solution.
> 
> And worse thing is that Linux on Cel/800 with SOHO cards do that NATing with 5%
> CPU load without any problem :-(.
> 
> Maybe I shoud try natd? May this help?
> Any suggestions?
> 
> thanks in advance,
> 
> Andriy Korud
> 
> 
> _______________________________________________
> freebsd-net@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
> 



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0312160439180.39201-100000>