Re: Significant network latency when using ipfw and in-kernel NAT

2012-09-13 Thread Soren Dreijer
Definitely. Since this is a server in production, I've obfuscated some of the IPs, etc. First off, here's the ifconfig. Our setup consists of a private (ix0) and a public nic (ix1) and an ip tunnel (gif0), which is what we use in ipfw to forward incoming packets to our internal boxes: ix0:

Re: Significant network latency when using ipfw and in-kernel NAT

2012-09-13 Thread Ian Smith
On Thu, 13 Sep 2012 0:48:01 -0500, Soren Dreijer wrote: Definitely. Since this is a server in production, I've obfuscated some of the IPs, etc. First off, here's the ifconfig. Our setup consists of a private (ix0) and a public nic (ix1) and an ip tunnel (gif0), which is what we use in

Re: Significant network latency when using ipfw and in-kernel NAT

2012-09-13 Thread Soren Dreijer
Luigi and Ian, As Ian mentioned, we had some off-list discussion by accident and he suggested the TSO approach too (although I don't know how that would affect e.g. ICMP traffic). It seems to have been a known issue for a while

Re: Significant network latency when using ipfw and in-kernel NAT

2012-09-13 Thread Ian Smith
On Thu, 13 Sep 2012 12:37:23 -0500, Soren Dreijer wrote: [Luigi Rizzo wrote:] i'd start by disabling all accelerations (and jumobgrams) and then move on from the results to figure out where is the problem. So, I went ahead and disabled TSO on ix0. That seemed to fix the