Re: dummynet/ipfw high load?

2014-04-12 Thread Raimundo Santos
On 11 April 2014 05:58, Dennis Yusupoff d...@smartspb.net wrote: NAT realized with pf nat, shaping with ipfw dummynet and traffic accounting with ng_netflow via ipfw ng_tee. Good time, Dennis. May I ask how much clients do you nat, shape and account? Why you do that with both engines (pf +

dummynet/ipfw high load?

2014-04-11 Thread Dennis Yusupoff
Good day, gurus! We have a servers on the FreeBSD. They do NAT, shaping and traffic accounting for our home (mainly) customers. NAT realized with pf nat, shaping with ipfw dummynet and traffic accounting with ng_netflow via ipfw ng_tee. The problem is performance on (relatively) high traffic. On

Re: dummynet/ipfw high load?

2014-04-11 Thread Sami Halabi
Hi, I had similar problem on the past and it turned to be the ammount of rules in ipfe. Using reduced subset with tables actually reduced the load. Sami ‏בתאריך יום שישי, 11 באפריל 2014, Dennis Yusupoff d...@smartspb.net כתב: Good day, gurus! We have a servers on the FreeBSD. They do NAT,