On 2007/02/23 16:27, William Bloom wrote: > I recently upgraded a Soekris 4801 firewall from OpenBSD 3.7 to 4.0. The > configuration for firewalling (pf.conf) is unchanged. On 3.7, at peak > throughput I normally saw maybe 65% - 76% interrupt mode and little or no > congestion. However, on 4.0 with similar traffic levels I see 85% - 95% > interrupt mode and the congestion counter increments fairly rapidly.
you might get a small improvement if you optimize the pf ruleset. > Of course, one cannot expect best performance from a Soekris due to the > Ethernet chipsets, but it was -adequate- on 3.7. ethernet chipsets make little difference, plug an em(4) in and you'll see pretty much the same. it's the PCI controller (or lack thereof) that's the problem. fwiw, WRAP manage about a 1/3 more throughput from a similar processor, but I'm not quite sure how.
