On 12:02, Wed 03 Jun 09, BARDOU Pierre wrote: > Hello, > > I have performance issues on a OpenBSD 4.4 firewall. > CPU load is OK (always below 50%), but system load is always between 1 and > 1.5, it may go up to 2 sometimes.
Is the system really slow ? Or are you basing this 'performance issue' on the loadavg number ? On some setups we have loadavg of around 10 and dont notice any performance impact. > > I suspected an I/O problem on the HDD because of pflogd, so I shut it down and > the system load is always as high. > > Could you tell me what should I upgrade to solve this ? > And what "Debug: Urgent" means ? > > Thank you > > > Stats of PF : > # pfctl -si > Status: Enabled for 29 days 15:27:29 Debug: Urgent > > State Table Total Rate > current entries 16592 > searches 36113459933 14099.9/s > inserts 286242425 111.8/s > removals 286225833 111.8/s > Counters > match 794705461 310.3/s > bad-offset 0 0.0/s > fragment 6 0.0/s > short 0 0.0/s > normalize 272 0.0/s > memory 0 0.0/s > bad-timestamp 0 0.0/s > congestion 6494 0.0/s > ip-option 12 0.0/s > proto-cksum 1 0.0/s > state-mismatch 107543 0.0/s > state-insert 10966 0.0/s > state-limit 18 0.0/s > src-limit 0 0.0/s > synproxy 0 0.0/s > > > dmesg : > # cat /var/run/dmesg.boot > OpenBSD 4.4 (GENERIC) #1021: Tue Aug 12 17:16:55 MDT 2008 > [email protected]:/usr/src/sys/arch/i386/compile/GENERIC > cpu0: Intel(R) Xeon(TM) CPU 2.80GHz ("GenuineIntel" 686-class) 2.80 GHz > cpu0: > FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUS > H,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,CNXT-ID,CX16,xTPR > real mem = 1073053696 (1023MB) > avail mem = 1029165056 (981MB) > mainbus0 at root > bios0 at mainbus0: AT/286+ BIOS, date 09/22/05, BIOS32 rev. 0 @ 0xffe90, > SMBIOS rev. 2.3 @ 0xf9920 (87 entries) > bios0: vendor Dell Computer Corporation version "A04" date 09/22/2005 > bios0: Dell Computer Corporation PowerEdge 1850 > acpi0 at bios0: rev 0 > acpi0: tables DSDT FACP APIC SPCR HPET MCFG > acpi0: wakeup devices PCI0(S5) PALO(S5) PBLO(S5) VPR0(S5) PBHI(S5) VPR1(S5) > PICH(S5) > acpitimer0 at acpi0: 3579545 Hz, 24 bits > acpihpet0 at acpi0: 14318179 Hz > acpiprt0 at acpi0: bus 0 (PCI0) > acpiprt1 at acpi0: bus 1 (PALO) > acpiprt2 at acpi0: bus 2 (DOBA) > acpiprt3 at acpi0: bus 3 (DOBB) > acpiprt4 at acpi0: bus 4 (PBLO) > acpiprt5 at acpi0: bus 8 (VPR0) > acpiprt6 at acpi0: bus 5 (PBHI) > acpiprt7 at acpi0: bus 6 (PXB1) > acpiprt8 at acpi0: bus 7 (PXB2) > acpiprt9 at acpi0: bus 9 (PICH) > acpicpu0 at acpi0 > bios0: ROM list: 0xc0000/0xb000! 0xcb000/0x1000 0xcc000/0x800 0xcc800/0x1000 > 0xcd800/0x2600 0xd0000/0x1800 0xec000/0x4000! > ipmi at mainbus0 not configured > cpu0 at mainbus0 > pci0 at mainbus0 bus 0: configuration mode 1 (no bios) > pchb0 at pci0 dev 0 function 0 "Intel E7520 Host" rev 0x09 > ppb0 at pci0 dev 2 function 0 "Intel E7520 PCIE" rev 0x09 > pci1 at ppb0 bus 1 > ppb1 at pci1 dev 0 function 0 "Intel IOP332 PCIE-PCIX" rev 0x06 > pci2 at ppb1 bus 2 > mpi0 at pci2 dev 5 function 0 "Symbios Logic 53c1030" rev 0x08: irq 7 > scsibus0 at mpi0: 16 targets, initiator 7 > em0 at pci2 dev 12 function 0 "Intel PRO/1000MT (82546EB)" rev 0x01: irq 10, > address 00:11:0a:64:32:74 > em1 at pci2 dev 12 function 1 "Intel PRO/1000MT (82546EB)" rev 0x01: irq 11, > address 00:11:0a:64:32:75 > ppb2 at pci1 dev 0 function 2 "Intel IOP332 PCIE-PCIX" rev 0x06 > pci3 at ppb2 bus 3 > ami0 at pci3 dev 11 function 0 "Symbios Logic MegaRAID" rev 0x01: irq 3 > ami0: Dell 520, 64b/lhc, FW 351S, BIOS v1.10, 64MB RAM > ami0: 1 channels, 0 FC loops, 1 logical drives > scsibus1 at ami0: 40 targets, initiator 40 > sd0 at scsibus1 targ 0 lun 0: <AMI, Host drive #00, > SCSI2 0/direct fixed > sd0: 34680MB, 4421 cyl, 255 head, 63 sec, 512 bytes/sec, 71024640 sec total > scsibus2 at ami0: 16 targets, initiator 16 > safte0 at scsibus2 targ 6 lun 0: <PE/PV, 1x2 SCSI BP, 1.0> SCSI2 3/processor > fixed > ppb3 at pci0 dev 4 function 0 "Intel E7520 PCIE" rev 0x09 > pci4 at ppb3 bus 4 > ppb4 at pci0 dev 5 function 0 "Intel E7520 PCIE" rev 0x09 > pci5 at ppb4 bus 5 > ppb5 at pci5 dev 0 function 0 "Intel PCIE-PCIE" rev 0x09 > pci6 at ppb5 bus 6 > em2 at pci6 dev 7 function 0 "Intel PRO/1000MT (82541GI)" rev 0x05: irq 11, > address 00:14:22:21:61:6d > ppb6 at pci5 dev 0 function 2 "Intel PCIE-PCIE" rev 0x09 > pci7 at ppb6 bus 7 > em3 at pci7 dev 8 function 0 "Intel PRO/1000MT (82541GI)" rev 0x05: irq 3, > address 00:14:22:21:61:6e > ppb7 at pci0 dev 6 function 0 "Intel E7520 PCIE" rev 0x09 > pci8 at ppb7 bus 8 > uhci0 at pci0 dev 29 function 0 "Intel 82801EB/ER USB" rev 0x02: irq 11 > uhci1 at pci0 dev 29 function 1 "Intel 82801EB/ER USB" rev 0x02: irq 10 > uhci2 at pci0 dev 29 function 2 "Intel 82801EB/ER USB" rev 0x02: irq 7 > ehci0 at pci0 dev 29 function 7 "Intel 82801EB/ER USB2" rev 0x02: irq 5 > usb0 at ehci0: USB revision 2.0 > uhub0 at usb0 "Intel EHCI root hub" rev 2.00/1.00 addr 1 > ppb8 at pci0 dev 30 function 0 "Intel 82801BA Hub-to-PCI" rev 0xc2 > pci9 at ppb8 bus 9 > vga1 at pci9 dev 13 function 0 "ATI Radeon VE QY" rev 0x00 > wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) > wsdisplay0: screen 1-5 added (80x25, vt100 emulation) > drm at vga1 unsupported > ichpcib0 at pci0 dev 31 function 0 "Intel 82801EB/ER LPC" rev 0x02 > pciide0 at pci0 dev 31 function 1 "Intel 82801EB/ER IDE" rev 0x02: DMA, > channel 0 configured to compatibility, channel 1 configured to compatibility > atapiscsi0 at pciide0 channel 0 drive 0 > scsibus3 at atapiscsi0: 2 targets, initiator 7 > cd0 at scsibus3 targ 0 lun 0: <TEAC, CD-ROM CD-224E-N, 3.AB> ATAPI 5/cdrom > removable > cd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2 > pciide0: channel 1 disabled (no drives) > usb1 at uhci0: USB revision 1.0 > uhub1 at usb1 "Intel UHCI root hub" rev 1.00/1.00 addr 1 > usb2 at uhci1: USB revision 1.0 > uhub2 at usb2 "Intel UHCI root hub" rev 1.00/1.00 addr 1 > usb3 at uhci2: USB revision 1.0 > uhub3 at usb3 "Intel UHCI root hub" rev 1.00/1.00 addr 1 > isa0 at ichpcib0 > isadma0 at isa0 > com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo > pckbc0 at isa0 port 0x60/5 > pckbd0 at pckbc0 (kbd slot) > pckbc0: using irq 1 for kbd slot > wskbd0 at pckbd0: console keyboard, using wsdisplay0 > pmsi0 at pckbc0 (aux slot) > pckbc0: using irq 12 for aux slot > wsmouse0 at pmsi0 mux 0 > pcppi0 at isa0 port 0x61 > midi0 at pcppi0: <PC speaker> > spkr0 at pcppi0 > npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16 > fdc0 at isa0 port 0x3f0/6 irq 6 drq 2 > fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec > biomask eded netmask eded ttymask ffff > mtrr: Pentium Pro MTRR support > uhub4 at uhub0 port 3 "Dell product 0xa001" rev 2.00/0.00 addr 2 > softraid0 at root > root on sd0a swap on sd0b dump on sd0b > WARNING: / was not properly unmounted > > -- > Cordialement, > > Pierre BARDOU > CSIM - Bureau 012 > > Midi Picardie Informatique Hospitalihre > 12 rue Michel Labrousse > BP93668 > F-31036 Toulouse CEDEX 1 > > Til : 05 67 31 90 84 > Fax : 05 34 61 51 00 > Mail : [email protected] > -- Michiel van Baak [email protected] http://michiel.vanbaak.eu GnuPG key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x71C946BD "Why is it drug addicts and computer aficionados are both called users?"
