Hi 
i am trying to put together an bridge with shapping and firewalling capacity.
Ok i have it all now together working ok , my problem is that the performance 
will go down the tube if there are to many connections, but the processor will 
not show any load.
if one examines the bandwidth with iperf

TCP window size: 16.0 KByte (default)
------------------------------------------------------------
[ ID] Interval       Transfer     Bandwidth
[  3]  0.0-10.0 sec   112 MBytes  89.7 Mbits/sec

with is excelent.
Now for my problem , i connected the bridge with one board to the router with 
a crossover cable, and the other one to the network.
This network has a lot of clients, when i did an line count in 
/proc/sys/net/ipv4/ip_conntrack_max
i got more than 23000 conections.
what happened was that the outgoing trafic went from 18Mb to 7Mb, speed in 
opening webpages went down it took about 10 more seconds to open webpage.
First i thought that there might be an bottleneck in iptables or netfilter or 
even in connection tracking so i disconnected these options in the kernel but 
the result was the same, what really is strange that the processor load 
continues 0.00 0.00 0.00 . It is an AMD Athlon XP 2000+.
the motherboard is an top EPOX , and the ethernet cards are intelpro100.
does anyone have an sugestion why this is happening and how to fix that.

-- 

Sincerly

        Joao Carvalho

_______________________________________________
Bridge mailing list
[EMAIL PROTECTED]
http://www.math.leidenuniv.nl/mailman/listinfo/bridge

Reply via email to