-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 15.02.2010 11:56, Albert Shih wrote: > Le 13/02/2010 à 09:11:24+0100, geoffroy desvernay a écrit >> Albert Shih a écrit : >>> OK now it's working. But I have some big trouble about the bandwith. >>> >>> Now when I try to do something like a scp, or ftp or wget from inside a >>> jail to outside, everything work fine. The traffic go to right interface, >>> the answer too. >>> >>> But when I try to do some network connection (ssh, scp etc..) from outside >>> to a jail the bandwith is catastrophic (~40kB/s on 1Gbit/s). >>> >>> And for you ? >>> >> Using this kind of setup since at least two years for ~500 real users >> without complains... (three different 'ssh jails' on the same machine >> with many vlans and three "default" gateways) >> > > OK I find the problem. It's come from TSO. > > If I disable TSO by sysctl everything become «normal» and works fine. > > Thanks again for your help. > You're welcome...
Just to be sure to get it: you do use an 'fxp' ethernet card and 7.2-RELEASE or not ? (In other words, is it the fxp bug described here http://www.freebsd.org/releases/7.2R/errata.html ?) On the server I use, I've server# sysctl -a|grep tso net.inet.tcp.tso: 1 … without any (known) problem, on a: FreeBSD 7.2-STABLE #3: Thu Sep 24 21:32:33 CEST 2009 with two bge(4) interfaces... - -- *geoffroy desvernay* C.R.I - Administration systèmes et réseaux Ecole Centrale de Marseille -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkt5UdcACgkQGbFYzwF8gKrAVACfV9Kuq6jef7nQHzzRREvllCUg 7a8AoI4BhBP4WciZgrPSw1/E2TPkcflo =spTC -----END PGP SIGNATURE----- _______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-pf To unsubscribe, send any mail to "[email protected]"
