On 3/18/2015 5:14 PM, John-Mark Gurney wrote:
So, I would first identify the machine w/ the cpu limited load.. I
assume that is apu...
Yup, the APU. The machines on either side are significantly faster
Then I would look at where most of the cpu time
is being spent, be it openvpn itself, or in the kernel... Most likely
it is the kernel, so getting stacks from the kernel would be more useful
than the one you generated... Use the command:
# dtrace -x stackframes=100 -n 'profile-997 /arg0/ { @[stack()] = count(); }
tick-60s { exit(0); }' -o out.kern_stacks
Also, another thing you can do is to compare the two using differential
flame graphs:
http://www.brendangregg.com/blog/2014-11-09/differential-flame-graphs.html
Which will highlight where the performances differ...
Will do, I will work on those.
As I've never used OpenVPN before and their docs don't go into saying
what it's using.. Is OpenVPN a kernel or userland VPN? Do they use
IPSec in the kernel? or are they just using UDP or TCP for their
connections?
All in userland. I use UDP for the transport, and it uses OpenSSL in
the base for the crypto. In this case, AES-128-CBC. There is no
hardware assist on the APU either to offload the AES.
---Mike
--
-------------------
Mike Tancsa, tel +1 519 651 3400
Sentex Communications, [email protected]
Providing Internet services since 1994 www.sentex.net
Cambridge, Ontario Canada http://www.tancsa.com/
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "[email protected]"
