I have a 486DX50 firewall that has been serving me well for a number of
years. I recently upgraded it fro 5.4 to 6.0 and performance plumeted
rather drastically (about 40%). I would like to fix it. What I have
noticed is that even when sitting idle the system spends ~20% of its
time in interrupt. Below I have included dmesg, kernel config, and
vmstat -i information.
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights
reserved.
FreeBSD 6.0-RELEASE-p4 #0: Thu Feb 16 09:42:52 UTC 2006
[EMAIL PROTECTED]:/usr/obj/usr/src/sys/PHOENIX
WARNING: debug.mpsafenet forced to 0 as ipsec requires Giant
WARNING: MPSAFE network stack disabled, expect reduced performance.
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: i486DX (486-class CPU)
real memory = 33554432 (32 MB)
avail memory = 27672576 (26 MB)
npx0: [FAST]
npx0: on motherboard
npx0: INT 16 interface
cpu0 on motherboard
isa0: on motherboard
orm0: at iomem 0xc-0xc7fff,0xdc000-0xd on isa0
aha0 at port 0x330-0x333 irq 15 drq 6 on isa0
aha0: AHA-1540/1542 64 head BIOS FW Rev. 0.8 (ID=41) SCSI Host Adapter,
SCSI ID 7, 16 CCBs
aha0: [GIANT-LOCKED]
ep0: <3Com 3C509-Combo EtherLink III> at port 0x310-0x31f irq 10 on isa0
ep0: Ethernet address: 00:20:af:11:11:11
ep0: [GIANT-LOCKED]
ep1: <3Com 3C509-TPO EtherLink III> at port 0x320-0x32f irq 11 on isa0
ep1: Ethernet address: 00:20:af:22:22:22
ep1: [GIANT-LOCKED]
ep2: <3Com 3C509-TPO EtherLink III> at port 0x340-0x34f irq 12 on isa0
ep2: Ethernet address: 00:20:af:33:33:33
ep2: [GIANT-LOCKED]
ata0 at port 0x1f0-0x1f7,0x3f6 irq 14 on isa0
fdc0: at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2
on isa0fdc0: [FAST]
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 16450, console
sio1 at port 0x2f8-0x2ff irq 3 on isa0
sio1: type 16450
sio2 at port 0x3e8-0x3ef irq 5 on isa0
sio2: type 16550A
sio3 at port 0x2e8-0x2ef irq 9 on isa0
sio3: type 16550A
sbc0: at port 0x220-0x22f,0x300-0x301,0x388-0x38b
irq 7 drq 0,5 on isa0
sbc0: [GIANT-LOCKED]
pcm0: on sbc0
pcm0: [GIANT-LOCKED]
Timecounters tick every 1.000 msec
IPv6 packet filtering initialized, unlimited logging
IPsec: Initialized Security Association Processing.
ipfw2 (+ipv6) initialized, divert loadable, rule-based forwarding
disabled, default to deny, logging unlimited
Waiting 5 seconds for SCSI devices to settle
acd0: CDROM at ata0-master PIO3
da0 at aha0 bus 0 target 0 lun 0
da0: Fixed Direct Access SCSI-2 device
da0: 5.000MB/s transfers (5.000MHz, offset 7)
da0: 2063MB (4226725 512 byte sectors: 64H 32S/T 2063C)
Trying to mount root from ufs:/dev/da0s1a
interrupt total rate
irq0: clk 203894894 1000
irq4: sio0 12447 0
irq5: sio2 4569524 22
irq6: fdc0 1 0
irq7: sbc0 1 0
irq8: rtc 26091825127
irq10: ep0 3392620 16
irq11: ep1109748 0
irq12: ep2 63506 0
irq13: npx01 0
irq14: ata0 75 0
irq15: aha0 102475 0
Total 238237117 1168
machine i386
cpu I486_CPU
ident PHOENIX
#makeoptionsDEBUG=-g# Build kernel with gdb(1) debug
symbols
#optionsSCHED_ULE # ULE scheduler
options INCLUDE_CONFIG_FILE
options SCHED_4BSD # 4BSD scheduler
options PREEMPTION # Enable kernel thread
preemption
options INET# InterNETworking
options INET6 # IPv6 communications protocols
options FFS # Berkeley Fast Filesystem
options SOFTUPDATES # Enable FFS soft updates
support
options UFS_ACL # Support for access control
lists
options UFS_DIRHASH # Improve performance on big
directoriesoptions NFSCLIENT # Network Filesystem
Client
options CD9660 # ISO 9660 Filesystem
options PROCFS # Process filesystem (requires
PSEUDOFS)options PSEUDOFS# Pseudo-filesystem
framework
options GEOM_GPT# GUID Partition Tables.
options COMPAT_43 # Compatible with BSD 4.3 [KEEP
THIS!]
options COMPAT_FREEBSD4 # Compatible with FreeBSD4
options COMPAT_FREEBSD5 # Compatible with FreeBSD5
options SCSI_DELAY=5000 # Delay (in ms) before probing
SCSI
options KTRACE # ktrace(1) support
options SYSVSHM # SYSV-style shared memory
options S