Re: Significant network latency when using ipfw and in-kernel NAT

2012-09-17 Thread Soren Dreijer
what about the other one ? Also, please disable jumbo_mtu as well. On both inside and outside. As far as I was able to tell, VLAN_HWCSUM cannot be disabled (or I don't know which command to use): http://lists.freebsd.org/pipermail/freebsd-net/2004-March/003464.html I also don't know how to

Re: Significant network latency when using ipfw and in-kernel NAT

2012-09-16 Thread Luigi Rizzo
On Sun, Sep 16, 2012 at 10:39:36PM -0500, Soren Dreijer wrote: Some more updates: I went ahead and disabled a few options on the ixgbe network interface today (most notably rxcsum and txcsum), which improved ping times to the FreeBSD box. I'm now able to reliably ping it with ~40ms from my

Re: Significant network latency when using ipfw and in-kernel NAT

2012-09-14 Thread Soren Dreijer
Can anybody confirm that disabling these other options (rxcsum, txcsum, vlanmtu, vlanhwtag, vlanhwfilter, vlanhwtso) won't cause my adapter to lose its connectivity? This is a server in production and I'd rather not cause an outage if I can prevent it. :) On Fri, Sep 14, 2012 at 12:00 AM, Ian

Re: Significant network latency when using ipfw and in-kernel NAT

2012-09-14 Thread Ian Smith
On Fri, 14 Sep 2012 09:12:27 -0500, Soren Dreijer wrote: Can anybody confirm that disabling these other options (rxcsum, txcsum, vlanmtu, vlanhwtag, vlanhwfilter, vlanhwtso) won't cause my adapter to lose its connectivity? This is a server in production and I'd rather not cause an outage

Re: Significant network latency when using ipfw and in-kernel NAT

2012-09-13 Thread Soren Dreijer
Definitely. Since this is a server in production, I've obfuscated some of the IPs, etc. First off, here's the ifconfig. Our setup consists of a private (ix0) and a public nic (ix1) and an ip tunnel (gif0), which is what we use in ipfw to forward incoming packets to our internal boxes: ix0:

Re: Significant network latency when using ipfw and in-kernel NAT

2012-09-13 Thread Ian Smith
On Thu, 13 Sep 2012 0:48:01 -0500, Soren Dreijer wrote: Definitely. Since this is a server in production, I've obfuscated some of the IPs, etc. First off, here's the ifconfig. Our setup consists of a private (ix0) and a public nic (ix1) and an ip tunnel (gif0), which is what we use in

Re: Significant network latency when using ipfw and in-kernel NAT

2012-09-13 Thread Soren Dreijer
Luigi and Ian, As Ian mentioned, we had some off-list discussion by accident and he suggested the TSO approach too (although I don't know how that would affect e.g. ICMP traffic). It seems to have been a known issue for a while

Re: Significant network latency when using ipfw and in-kernel NAT

2012-09-13 Thread Ian Smith
On Thu, 13 Sep 2012 12:37:23 -0500, Soren Dreijer wrote: [Luigi Rizzo wrote:] i'd start by disabling all accelerations (and jumobgrams) and then move on from the results to figure out where is the problem. So, I went ahead and disabled TSO on ix0. That seemed to fix the

Significant network latency when using ipfw and in-kernel NAT

2012-09-12 Thread Soren Dreijer
Hi there, We're running freebsd 9.0-RELEASE on a box whose primary purpose is to act as a firewall and a gateway. Up until today, we've been using ipfw in conjunction with natd and the divert action in ipfw to forward packets between the freebsd box (i.e. the public Internet) and our private