* andy <[email protected]> [2013-05-15 11:31]: > I run 12 OpenBSD firewalls, and I have an issue on my highest throughput > boxes. I have HP DL160 G6 boxes with Intel ET2 4 port NIC's. > I have a problem where I cannot run traffic any faster than ~700Mbit as I > am hitting 100% utilisation on the first core due to the giant big lock > trying to process the MSI interrupts. > > The traffic comprises of lots of small payload packets (currently running > around 300,000 to 400,000 pps) and I cannot run any faster. > > I have tunned the boxes as much as possible using information from > calomel.org etc and overall we have been extremely happy with them, expect > for the performance limits.
congratulations, by "using information" from a random idiot (who has very well and often demonstrated, last not least by the articles on said website, that he doesn't understand a single bit of what he's writing about) you made your systems slower. > I understand the devs want to keep the network stack in-house as their are > many network cards that simply screw things up, and it is this approach > which has given OBSD the stability and security reputation it has. But this > approach with the giant big lock limit imposes a hard performance limit for > OBSD. But I do also understand that the devs realise this and as a short > term solution until the kernel becomes true SMP, they have started to > implement ToE and offloading for some NICs :D :) > > Can you please tell me when ToE support will be added for the Intel series > of cards? We are going to have to abandon OBSD if it cannot perform at the > throughputs we need but I really want to stay with OBSD? I am not a > developer and so cannot contribute myself to any efforts (believe me I > would if i could!).. now let's revisit that. 1) you have a performance problem 2) [ hint: you miss a step here ] 3) you think ToE is the solution (why?) hmpf. let me put it straight: your idea that ToE would be the answer is plain wrong. there is much more headroom in OpenBSD than what you are running, but that requires analysis, thought and probably help by an experienced person who really understands pf. -- Henning Brauer, [email protected], [email protected] BS Web Services, http://bsws.de, Full-Service ISP Secure Hosting, Mail and DNS Services. Dedicated Servers, Root to Fully Managed Henning Brauer Consulting, http://henningbrauer.com/
