Re: [pfSense Support] About RB44GV 4-Port Gigabit Ethernet Adapter
Koray AGAYA wrote: I want use RB44GV 4-Port Gigabit Ethernet Adapter. is it works on Pfsense 1.2.2 ? Can you try this card ? It's important for me ! STFW. http://www.rasyid.net/2008/08/17/detect-rb44gv-on-freebsd-7/ Btw, what use has a 4 port gigabit ethernet on the PCI bus? Simple calculation shows that you are never able to use it at 4xGb speed. I'm having slower version of that card (RB44) working with pfsense 1.2.2. -- Veiko - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] throughput, haproxy
On Thu, Nov 19, 2009 at 2:27 AM, Lenny five2one.le...@gmail.com wrote: # iperf -c 2.2.2.11 -t 1200 -i 10 -w 75000 Client connecting to 2.2.2.11, TCP port 5001 TCP window size: 73.5 KByte (WARNING: requested 73.2 KByte) [ 3] local 1.1.1.1 port 14852 connected with 2.2.2.11 port 5001 [ ID] Interval Transfer Bandwidth [ 3] 0.0-10.0 sec746 MBytes626 Mbits/sec [ ID] Interval Transfer Bandwidth [ 3] 10.0-20.0 sec762 MBytes639 Mbits/sec [ ID] Interval Transfer Bandwidth [ 3] 20.0-30.0 sec765 MBytes642 Mbits/sec [ ID] Interval Transfer Bandwidth [ 3] 30.0-40.0 sec776 MBytes651 Mbits/sec [ ID] Interval Transfer Bandwidth [ 3] 40.0-50.0 sec772 MBytes648 Mbits/sec [ ID] Interval Transfer Bandwidth [ 3] 50.0-60.0 sec776 MBytes651 Mbits/sec [ ID] Interval Transfer Bandwidth [ 3] 60.0-70.0 sec768 MBytes644 Mbits/sec I found my old results of iperf and this was the command I executed: iperf -c server-ip -t 60 -M 500 I always got 300-400Mb/s, even with firewall off. And I could never get more than 85kpps. Unfortunately, I can't run these tests now, as the server is in production. Thanks, Lenny. Would you like to test a kernel with the Yandex driver? 1.2.3-* does not have the yandex driver included. Scott - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] throughput, haproxy
Scott Ullrich wrote: On Thu, Nov 19, 2009 at 2:27 AM, Lenny five2one.le...@gmail.com wrote: # iperf -c 2.2.2.11 -t 1200 -i 10 -w 75000 Client connecting to 2.2.2.11, TCP port 5001 TCP window size: 73.5 KByte (WARNING: requested 73.2 KByte) [ 3] local 1.1.1.1 port 14852 connected with 2.2.2.11 port 5001 [ ID] Interval Transfer Bandwidth [ 3] 0.0-10.0 sec746 MBytes626 Mbits/sec [ ID] Interval Transfer Bandwidth [ 3] 10.0-20.0 sec762 MBytes639 Mbits/sec [ ID] Interval Transfer Bandwidth [ 3] 20.0-30.0 sec765 MBytes642 Mbits/sec [ ID] Interval Transfer Bandwidth [ 3] 30.0-40.0 sec776 MBytes651 Mbits/sec [ ID] Interval Transfer Bandwidth [ 3] 40.0-50.0 sec772 MBytes648 Mbits/sec [ ID] Interval Transfer Bandwidth [ 3] 50.0-60.0 sec776 MBytes651 Mbits/sec [ ID] Interval Transfer Bandwidth [ 3] 60.0-70.0 sec768 MBytes644 Mbits/sec I found my old results of iperf and this was the command I executed: iperf -c server-ip -t 60 -M 500 I always got 300-400Mb/s, even with firewall off. And I could never get more than 85kpps. Unfortunately, I can't run these tests now, as the server is in production. Thanks, Lenny. Would you like to test a kernel with the Yandex driver? 1.2.3-* does not have the yandex driver included. Scott - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org I sure would. Thanks. Lenny.
Re: [pfSense Support] throughput, haproxy
On Thu, Nov 19, 2009 at 12:07 PM, Lenny five2one.le...@gmail.com wrote: I sure would. Thanks. OK, give me a bit to get it ready. Should be back to you in a couple hours. Scott - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] throughput, haproxy
Lenny wrote: I always got 300-400Mb/s, even with firewall off. And I could never get more than 85kpps. Unfortunately, I can't run these tests now, as the server is in production. Thanks, Lenny. May be stupid question but.. How did you measure 85kpps and how do you measure speed and pps in production? Evgeny. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] throughput, haproxy
On Thu, Nov 19, 2009 at 12:35 PM, Scott Ullrich sullr...@gmail.com wrote: OK, give me a bit to get it ready. Should be back to you in a couple hours. Lenny, First of all make sure you backup your configuration and have installation media handy (just in case). Run this from a shell (option 8): fetch -o /boot/kernel/ http://cvs.pfsense.org/~sullrich/7-yandex/kernel.gz Then reboot the firewall and let me know how it goes. Scott - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] throughput, haproxy
Scott Ullrich wrote: On Thu, Nov 19, 2009 at 12:35 PM, Scott Ullrich sullr...@gmail.com wrote: OK, give me a bit to get it ready. Should be back to you in a couple hours. Lenny, First of all make sure you backup your configuration and have installation media handy (just in case). Run this from a shell (option 8): fetch -o /boot/kernel/ http://cvs.pfsense.org/~sullrich/7-yandex/kernel.gz Then reboot the firewall and let me know how it goes. Scott - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org ok, great, thanks a lot! But unfortunately, I'm already at home, plus I wanna see if the changes I've made to sysctl and loader.conf (the ones we talked about) going to make any difference. But I'll do it on Sunday. Thanks again, Lenny.
Re: [pfSense Support] throughput, haproxy
Lenny wrote: Evgeny Yurchenko wrote: Lenny wrote: I always got 300-400Mb/s, even with firewall off. And I could never get more than 85kpps. Unfortunately, I can't run these tests now, as the server is in production. Thanks, Lenny. May be stupid question but.. How did you measure 85kpps and how do you measure speed and pps in production? Evgeny. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org To tell you the truth I don't remember, as it was a few months ago, but I'm attaching the RRD graphs: traffic, packets and throughput. You can clearly see the peaks, although as you might know, on the graph from previous weeks the numbers actually become a bit smaller than they really were. For example, on the traffic graph it says 270Mb was a maximum outgoing, when in fact my actual maximum was about 310Mb. I would attach some newer graphs, but my next peak is in 2 days. Just to be clear: at those peaks I had my CPUs at maximum or very near that. Lenny. Ok. But looking into this http://forum.pfsense.org/index.php/topic,20624.0.html and watching my own box during tests peformed for you I see weird things: [ ID] Interval Transfer Bandwidth [ 3] 930.0-940.0 sec744 MBytes624 Mbits/sec [ ID] Interval Transfer Bandwidth [ 3] 940.0-950.0 sec748 MBytes627 Mbits/sec [ ID] Interval Transfer Bandwidth [ 3] 950.0-960.0 sec745 MBytes625 Mbits/sec But! So I looked into how these graphs are populated - /var/db/rrd/updaterrd.sh counter=1 while [ $counter -ne 0 ] do ... sleep 60 done So, every 60 seconds you take data by means of '/usr/bin/netstat -nbf link -I bge0' and feed it to RRD. Now let's do /usr/bin/netstat -nbf link -I bge0: NameMtu Network AddressIpkts IerrsIbytes Opkts Oerrs Obytes Coll bge0 1500 Link#1 00:0b:cd:52:5b:41 299767100 0 2605426760 299287128 0 191226159 0 Bytes Number has 9 digits so wrap will happen after receiving/transmitting 999 999 999 bytes / 60sec * 8 = 133 333 333 bits/s which is approx 130 Mb/s I believe RRD can handle wraps through 0 but at some point (speed) you'll have two(or even 3-4) wraps. What am I missing here? Evgeny. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] throughput, haproxy
Bill Marquette wrote: I'm not positive if netstat shows a 32 or 64 bit number, but it's certainly not limited to 9 digits. Your Ibytes column alone has 10 2,605,426,760. 32 bit will still wrap pretty quick however and is not suitable for gigabit links. --Bill Yes, ten digits, sorry. Anyway, we can't get true picture of bandwidth usage looking at rrd graphs and having speed 'after 500Mb/s', is it what you are saying? Thanks. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] throughput, haproxy
No you should not worry with your level of traffic. But as soon as you cross 500Mb/s you should not trust RRD any more. I was gradually increasing bandwidh usage using iperf udp -b option: 300Mb/s - ok, 400Mb/s - ok, 500Mb/s - ok, 600Mb/s - ooops -( In pfSense 2.0 we use the 64 bit counters for the data collection using the pf counters. This will prevent such wrapping. Regards, Seth - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
