Date: Tue, 27 Aug 2019 20:16:54 +0300 From: Victor Gamov <vit@otcnet.ru> To: Eugene Grosbein <eugen@grosbein.net>, freebsd-net@freebsd.org Subject: Re: finding optimal ipfw strategy Message-ID: <7f1d41d7-3d6c-a918-ea1a-6336caaae151@otcnet.ru> In-Reply-To: <cd72f9bf-a253-6a29-1405-1d31c9170836@grosbein.net> References: <f38b21a5-8f9f-4f60-4b27-c810f78cdc88@otcnet.ru> <4ff39c8f-341c-5d72-1b26-6558c57bff8d@grosbein.net> <a559d2bd-5218-f344-2e88-c00893272222@otcnet.ru> <cd72f9bf-a253-6a29-1405-1d31c9170836@grosbein.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On 26/08/2019 20:15, Eugene Grosbein wrote: > 26.08.2019 23:25, Victor Gamov wrote: > >> More general question about my current config. I have about >> 200Mbit input multicasts which bridged and filtered later (about >> 380 Mbit bridged if trafshow does not lie me :-) ) > > Don't trust trafshow. Use: systat -ifstat 1 This! systat show me more real picture: 750Mbit in, 650 Mbit out via bridge >> Is it possible to get CPU load about 30% at this config after ipfw >> optimization? Or may be main bottleneck is not ipfw-specific? > > You won't know until you try and nobody can tell. Too many > variables. And you better compare it with 11.3 because 12.0 may have > some unsolved preformance regressions. I see. I will try 11.3 later. Now after output optimization as Eugene recommended one core load decreased from 88 to 77 percents. But many loads decreased when unused rules removed. Now I'll try to optimize input rules too like ===== table All_Ifaces create type iface table All_Ifaces add vlan10 20010 table All_Ifaces add vlan20 20020 table All_Ifaces add vlan30 20030 12000 skipto tablearg ip from any to any in recv table(All_Ifaces) 20010 allow udp from src1 to mcast1 in recv via vlan10 20011 deny ip from any to any 20020 allow udp from src2 to mcast2 in recv via vlan20 20021 deny ip from any to any ===== -- CU, Victor Gamov
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?7f1d41d7-3d6c-a918-ea1a-6336caaae151>