On Thu, Feb 18, 2016 at 10:26 AM, Giles Davis <[email protected]> wrote:
>
>
> Using Intel E3-1270s and Intel 10G NICs (forget the exact model, but
> they use the BSD ix driver) we start seeing packet loss and a general
> maximum throughput at around 1-1.2Gbit. Our 'solution' so far of just
> adding more appliances and splitting the load really won't scale
> forever, so if anyone has any suggestions of 'better hardware' or BSD
> optimizations that would let us push more through a single appliances,
> i'd love to hear it. We've got a reasonable set of BSD networking tweaks
> and optimizations that certainly help, but we still can't manage to push
> more than our little-over-a-gigabit maximum before things start wobbling.



I'm a little surprised at your experience. A few years ago I built a
PFSense unit with an Intel motherboard, 1st gen Core i3 CPU, and a
single onboard Intel (em) GBE NIC. All routing was done through vlans
and it had no trouble reaching wire speed with around 50% CPU usage.

I do recommend using the net.inet.ip.fastforwarding=1 tweak if you
can. Note that it breaks IPSEC and captive portal.

As far as 10G NICs, I was sure I read recently that the FreeNAS people
were recommending Chelsio, but I can't find the reference now.

db
_______________________________________________
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Reply via email to