Am Mittwoch, den 04.10.2017, 15:05 -0400 schrieb ED Fochler: > I have a similar situation and I solved it with limiters. I'm also a fan of > limiters to ensure fair sharing of uplink bandwidth by internal users. I > haven't tried changing system tunables though, so that solution may be better.
So far the situation was better this morning. But the web interface became unresponsive and the OpenVPN daemon died. So I'm still scared. > Nothing is sent through the limiter until you create a rule that catches the traffic and routes it through the limiter, so you're not going to accidentally slow everything down just by creating a rule. I will try that. > The behavior you're speaking of sounds like your machine is getting maxed out by interrupts or some internal bandwidth. Setting up a limiter sounds like a better solution than pushing the hardware to the point of unrefined behavior. Yes, I suspect something like that, too. The system load is going up heavily (Load >=5) sometimes. However the web interface claims that the load is around 30%. RAM and state tables look fine, too. On Linux-based systems I regularly use iptables rules and often go near wire speed. But the system load rarely goes up noticably. So I wonder what part is really causing that load. I ran "top" this morning and saw that the "filterlog" process was at the top of the list. My firewall rules though do not do any logging at the moment. Could that still be a problem? Thanks for your suggestions so far. I'll try them all. …Christoph _______________________________________________ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
