From owner-freebsd-jail@freebsd.org Fri Feb 22 17:03:33 2019 Return-Path: Delivered-To: freebsd-jail@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 94A0714F3953; Fri, 22 Feb 2019 17:03:33 +0000 (UTC) (envelope-from trashcan@ellael.org) Received: from mx1.enfer-du-nord.net (mx1.enfer-du-nord.net [IPv6:2001:41d0:302:1100::e:1def]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id DAE6C75CB0; Fri, 22 Feb 2019 17:03:32 +0000 (UTC) (envelope-from trashcan@ellael.org) Received: from wmx1.enfer-du-nord.net (www.mer-waases.lan [10.2.2.2]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mx1.enfer-du-nord.net (Postfix) with ESMTPSA id 445d2d5KYzz1BsT; Fri, 22 Feb 2019 18:03:21 +0100 (CET) X-Virus-Status: Clean X-Virus-Scanned: clamav-milter 0.101.1 at mail.enfer-du-nord.net MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Date: Fri, 22 Feb 2019 18:03:21 +0100 From: Michael Grimm To: freebsd-net@freebsd.org Cc: freebsd-jail@freebsd.org Subject: Re: Performance issues with VNET/bridge/VLAN In-Reply-To: <9B0EC546-38E6-424E-9CC9-93F4C58B296F@punkt.de> References: <9B0EC546-38E6-424E-9CC9-93F4C58B296F@punkt.de> Message-ID: <355c746ae7ec884407299e2649283cfc@ellael.org> X-Sender: trashcan@ellael.org User-Agent: Roundcube Webmail/1.3.8 X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,UNPARSEABLE_RELAY autolearn=ham autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on mail.mer-waases.lan X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Feb 2019 17:03:33 -0000 Am 2019-02-22 11:31, schrieb Patrick M. Hausen: [x-posted to freebsd-jail@freebsd.org] > The machine is an iocage jail host, all jails with VNET. > > The problem is: network performance in the jails (not on the host!) is > abysmal > with the second setup. Not consistently so, everything *seems* to work > but e.g. a customer complained that checking out a project from github > happend at 15k/s … that’s when we started to investigate. [...] > *Any* idea what might be going on here? We use VNET all the same on all > the > hosts and it is still labelled „experimental", yes. But all the parts > that > make up the different setups - bridge(4), vlan(4) - have been in > FreeBSD > for ages. I’m just combining features orthogonally like every good > sysadmin ;-) > > If someone is willing to do some investigation, I think I can provide a > test > system and remote access … This sounds familiar to me, please have a look at the following two threads: https://lists.freebsd.org/pipermail/freebsd-jail/2019-February/003684.html https://lists.freebsd.org/pipermail/freebsd-net/2017-December/049470.html If your hosts run on cloud infrastructure odds are that the mentioned settings will work in your case. Regards, Michael