> On Feb 16, 2017, at 8:09 AM, HD | Michael Westergaard <[email protected]> 
>  
> Packetfence is only doing DHCP and Network Access, it is not using any 
> RADIUS. The solution is running in line deployment with routed mode for a 
> campus network for 50 users and they experience a lot of lag spikes during 
> video games. All computers are wired to the network. 
> To troubleshoot this I have set up multiple pings to foreign servers and the 
> edge gateway and latency spikes occur randomly the same time the students are 
> experiencing latency issues in their games as well. 
>  
> To rule out anything with the VMware host or the Layer 2 network I have set 
> up a Centos 6 virtual machine router performing routing only with firewall 
> enabled and the issue is not occurring at all. Bandwidth is not an issue 
> since traffic shaping has been set up to prioritize gaming traffic and 
> bandwidth is never reaching the limit of 200Mbit/200Mbit as well.

That does not rule out much.

You have set up a test case where there are essentially no user processes 
running.
It's also not handling the same traffic as your PF VM.
Of course it's not going to behave the same way as a VM that running a number 
of other processes and handling all of your users traffic.


>  
> The problem to me seems to be be related to software on the Packetfence VM. 
> The VM is never going above 50% CPU nor above 8GB RAM. Ressources should not 
> be the problem. 
>  
> The Packetfence VM is the Packetfence 6.4 ZEN image. No packet or anything 
> has been upgraded. How can we troubleshoot this?

You are talking about debugging performance issues related to kernel code here.
The kernel handles routing and NAT/Firewalling.

So any good book or online resource on debugging linux performance issues in 
general should do.

But really, what I recommend is that if low latency is a priority you should 
run that traffic in out of band mode.
The inline mode, especially running on a VM is never going to beat the 
performance of dedicated routing hardware in the form of an actual router or 
layer 3 switch.

Regards,
--
Louis Munro
[email protected] <mailto:[email protected]>  ::  www.inverse.ca 
<http://www.inverse.ca/> 
+1.514.447.4918 x125  :: +1 (866) 353-6153 x125
Inverse inc. :: Leaders behind SOGo (www.sogo.nu <http://www.sogo.nu/>) and 
PacketFence (www.packetfence.org <http://www.packetfence.org/>)

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to