Re: Dragonflybsd's pf concurrent instead of single-threaded

2014-07-08 Thread InterNetX - Robert Garrett
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

There is 0 chance this works on OpenBSD. The underlying concepts that
not only make it possible on Dragonfly, but actually useful are not there.

As Henning Brauer pointed out, this makes no sense if the underlying
subsystems arent taken care of first. However it does seem to make a
difference on boxes with say 32 cores and a reasonable amount of memory.
Provided the underlying systems are taken care of.

the lwkt infrastructure mechanisms used here, are non trivial things,
and are really the essence of the reason for Dragonflys original fork to
begin with.

Lets see lwkt, lockmgr, critical sections, atomic adds, pretty much a
lesson in using dragonfly specific locking in this section of code.
not to mention this is a pretty old version of pf, and is in no way
current, with the pf in openbsd. Uprading pf with our set of changes
to support our locking mechanisms, is a seriously non trivial exercise.
trying to port this to a architecture without the underlying primitives
would be a massive task.

RG



On 07/08/2014 05:57 AM, Henning Brauer wrote:
 thanks for the laugh.
 
 * Loïc Blot loic.b...@unix-experience.fr [2014-07-07 10:21]:
 It's a very interesting diff.

 If i have time i'll test it on -CURRENT on the two next weeks.

 -- 
 Best regards, 

 Loïc BLOT, Engineering
 UNIX Systems, Security and Network Engineer
 http://www.unix-experience.fr


 Le jeudi 03 juillet 2014 à 11:35 -0500, patric conant a écrit :
 This seems relevant to a lot of interest.

 commit 3a0038bfb239dd522057809c52d7d23dd2134c38

 Author: Matthew Dillon dillon at apollo.backplane.com
 http://lists.dragonflybsd.org/mailman/listinfo/commits
 Date:   Thu Jun 26 20:40:32 2014 -0700

 pf - make the bulk of PF concurrent under normal operation

 * state and ip fragment tables are now per-cpu.

 * packet paths acquire pf_token shared instead of exclusive.  Packet
   processing runs concurrently.

 * Any dynamic rules updates will run synchronously for now.

 * State expiration from the pfpurge thread runs synchronously for now.
   More work can be done here.

 * ioctl (and also pfsync) paths acquire pf_token exclusively.  That is,
   primarily pfctl commands.  This includes rules updates and state 
 scans.
   More work can be done here.

 Summary of changes:
  sys/net/pf/Makefile|   2 +
  sys/net/pf/if_pfsync.c |  85 +++---
  sys/net/pf/if_pfsync.h |   2 +
  sys/net/pf/pf.c| 260 --
  sys/net/pf/pf_ioctl.c  | 427 
 +++--
  sys/net/pf/pf_norm.c   | 118 --
  sys/net/pf/pfvar.h |  17 +-
  7 files changed, 588 insertions(+), 323 deletions(-)
 http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/3a0038bfb239dd522057809c52d7d23dd2134c38

 


Mit freundlichen Grüßen

Robert Garrett
Senior System Engineer
Technical Projects  Solutions
- --
InterNetX GmbH
Maximilianstr. 6
93047 Regensburg
Germany

Tel. +49 941 59559-480
Fax  +49 941 59559-245

www.internetx.com
www.facebook.com/InterNetX
www.twitter.com/InterNetX

Geschäftsführer/CEO: Thomas Mörz
Amtsgericht Regensburg, HRB 7142
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJTu6ERAAoJEMrvovfl62c84hsH/0HDjGInnL5w8Ea6kaD2pVN+
jk2yJ2wY4iZFKVBbnb0Jn6ZLJK9DoUEtAOszwCIb69PbHNMmW3QkuVzpJj8lZcQy
BCGKuuImjHAR+MSsAASJl09sJc7s50Buo6HX2KeRAMKxkiBu6eBqenlhVYp6SFgZ
JsARhd+C4VJdzCJjzyFEunJEWAKs8dfawpQDeywhKgOeedxl0DnNSlS9Bdn6gpFe
3JuwtRb8Wy6cyt6ZilkNQWWnIa5b+8XMv7n1hNKqbMQRgY2qWjLbq50GuPikMN01
qAj+yrN88rWm980RZveRJJiZ/9UpDonHIvQZiveKdX4ZKXL1UMBjde0Igb8S9w4=
=Kpa9
-END PGP SIGNATURE-



Re: Dragonflybsd's pf concurrent instead of single-threaded

2014-07-08 Thread InterNetX - Robert Garrett
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

you will find ldap support within dfly -current..

and no you will not find nfsv4

rg

On 07/06/2014 02:16 AM, Brad Smith wrote:
 On 05/07/14 8:01 PM, Predrag Punosevac wrote:
 Franco Fichtner write:

 I have immense respect for Matt as a user of his code since Amiga C
 compiler. I probably speak for lots of people both in OpenBSD and
 DragonFly camp if I say that I would prefer him to finish HAMMER2 and
 leave concurrent threading in PF to Henning.

 Talks about this date back at least two years.  These days NetBSD is
 doing npf(4), and FreeBSD and DragonFly moved on to implement their
 own SMP support.


 The rumors are that npf is a vaporware.  DragonFly community is tiny. So
 tiny that in-spite of HAMMER I could not use DragonFly on my production
 file servers because it lacks LDAP support let alone NFSv4. FreeBSD
 always had its own genuine firewall solution IPFW. IPFW is so good that
 inspired even a better tool called iptables. Some people unfortunately
 didn't buy it. OS X switched from IPFW to PF couple releases ago.

 Missing SMP support is the fork in the road.  The window of
 opportunity seems to be closing.  A penny for Henning's thoughts on
 this...


 I would say it is about a time. PF has never meant to be portable. A
 quick look on the version of PF in use in other BSDs is quite revealing.
 That being said OpenBSD project has its own pace which has never being
 dictated by current fashion trends or a noise made by people like me
 who don't contribute the code. Thanks God for that!
 
 What is the point of your posts other than filling peoples mail
 boxes with useless bits?
 
 


Mit freundlichen Grüßen

Robert Garrett
Senior System Engineer
Technical Projects  Solutions
- --
InterNetX GmbH
Maximilianstr. 6
93047 Regensburg
Germany

Tel. +49 941 59559-480
Fax  +49 941 59559-245

www.internetx.com
www.facebook.com/InterNetX
www.twitter.com/InterNetX

Geschäftsführer/CEO: Thomas Mörz
Amtsgericht Regensburg, HRB 7142
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJTu6IeAAoJEMrvovfl62c811cH/i3t6PExfQkgKuBuat72rTVJ
tpKaeHKK1vkV9fRhaljJyRZIceDAnJiBot7FZgVEVmteANzZffMK0inumNJx1nCf
0iC6L+6ypG6bqkATpD7hz2Q4vA0OZopeQG2njvTGwl7Njaq5MfVcEVCdRG13lj2m
HTrksidCy7r5P48BdO9YXnagw9d2wAce4LhuKn5D7LFWYfSz/H/dt1ViveppNsuT
fOPP91GItQ2R3Jnqqf4oJJBSW61ea4dQ5VfuerXv2HOCm9s+ASBBdCaqwnVzMJxp
jiQhVzXClfENKMd6HZ+Lf3Csld4A9i+85IcPrWCEtAsfz42oQ7JRQ9ZJpklRyp4=
=85jC
-END PGP SIGNATURE-



Re: Vision 2020: Making OpenBSD the world's fastest OS

2014-06-12 Thread InterNetX - Robert Garrett
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

If this does not return something, your configuration is broken. period.

this one little thing, that so many people ignore, slows down
everything.. even if you have dns properly configured. Set the hosts
file on your machine properly.

You will be surprised at how much faster it boots, and everything else
runs. This is true on all forms of unix.

RG

On 06/12/2014 04:16 PM, Stuart Henderson wrote:
 getent hosts `hostname`


Mit freundlichen Grüßen

Robert Garrett
Senior System Engineer
Technical Projects  Solutions
- --
InterNetX GmbH
Maximilianstr. 6
93047 Regensburg
Germany

Tel. +49 941 59559-480
Fax  +49 941 59559-245

www.internetx.com
www.facebook.com/InterNetX
www.twitter.com/InterNetX

Geschäftsführer/CEO: Thomas Mörz
Amtsgericht Regensburg, HRB 7142
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJTmcsAAAoJEMrvovfl62c8IxQIAJ1otdNkvrklKnCccQwX7DPw
KSJG2UZxX5pU/QwzpJUlNiTxeYXJ8pAuszz8+HC8u/S7Oj2Z0hZ8XykXP+YALg/b
6T/U2Bj8sqf/aV50PKEuXy2TGle8SYikqeBi3NMFsLrZ2bmx237TMWSPl+AWuHBl
h/uAwfYhBqvtFj9gUS9x8fZhyCm6wpelsofuHX/wL5AIfWnvZxkUV2cnp6aI10pN
84+pIfxllyBbR51+OwiBi9tVGgW4gzMq3uxskyepSO8XOEW3l+d9GRxkuuAIZ1cv
Z9mrmsJhWcwuJ84JIgoNRvGQ0MM1u/JkX1pH+lh72L57Ghg8c6nXhexbOf3m9b8=
=0BHs
-END PGP SIGNATURE-



Re: Are there any default password managers in OpenBSD?

2013-12-05 Thread InterNetX - Robert Garrett
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

use sticky notes.. preferably on your monitor

On 12/05/2013 08:20 AM, obsd, cgi wrote:
 So I know the rule.. only remember a few very very long passwords
 (ex.: based on several words and a few special chars), and keep the
 rest of the passwords in a password manager (those aren't
 remembered and extreme long).
 
 But this gets me to 2 questions:
 
 - Are there any default password managers in OpenBSD (console/GUI
 based?)? Or there are only from ports that are not very audited?
 What is the advise to where to store the pwd's?
 
 - Are there any best-practises to generate a password? - that are
 kept in password manager, so ex.: 128 char long with special/random
 chars, etc.
 
 Thanks for your time
 


Mit freundlichen Grüßen

Robert Garrett
Senior System Engineer
Technical Projects  Solutions
- --
InterNetX GmbH
Maximilianstr. 6
93047 Regensburg
Germany

Tel. +49 941 59559-480
Fax  +49 941 59559-245

www.internetx.com
www.facebook.com/InterNetX
www.twitter.com/InterNetX

Geschäftsführer/CEO: Thomas Mörz
Amtsgericht Regensburg, HRB 7142
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJSoGh6AAoJEMrvovfl62c8u04IAMoYw96oGkcLWoSwcd1xm1fn
E2sEsBb516TjstSUIq/xWTVuypLFR2K0Kaal9P+N8JeBTmqD9hK5FfniNyOWIXsG
LCCRAPxt94SZ6PipWyKSyzcAHDg5NXGwo4FBluVD8qf8nctikqEpbbj/+/1g6pB7
xghvGguh9o/A0y7uYe/5vWy1oSOoVnJFXwJ7C1GpoxUYxD8hDs2ZDsEQVzdNd04B
oZoeYG5PEC9TdB/txOxslb0NuqBo+5Hb9ZdthDm+C8cohKdiKDtoAMRI40U0NUQf
PuH4jNRkhVlpWBM8S+NkuU+HpQu9lMgZaopF5oR5450mKU2xAjrlQdyqmHyXymw=
=a7rF
-END PGP SIGNATURE-



Re: QEMU CPU cores not showing up

2013-11-15 Thread InterNetX - Robert Garrett
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Then as Stated you are already vulnerable to much more than interrupt
remapping will fix. So dont worry about it.

On 11/14/2013 06:00 PM, Giancarlo Razzolini wrote:
 Em 14-11-2013 14:18, InterNetX - Robert Garrett escreveu:
 The issue you outlined below is not an openbsd issue, this is a
 kvm issue. and depends greatly on the version of linux/whatever
 you are using. The interrupt remapping you are talking about is
 either a bios issue (likely) or an issue with the hypervisor.
 
 it sounds like to me you are using or attempting to use SRIOV.
 
 all of the issues that you mentioned are still relevent even
 with safe interrupts, as well as several you did not mention.
 Robert,
 
 I do believe it is a specific issue with OpenBSD, because using
 the same hypervisor I can do pci passthrough, using the same
 versions, hardware, etc, to other operating systems using interrupt
 remapping.
 
 I do have indeed SRIOV enabled on my bare metal bios. The thing is 
 that kvm specifically warns me that the guest do not support
 interrupt remapping, when using openbsd only. As I told before, it
 is not a problem for me right now, since I enable the unsafe
 interrupt assignment and the OS works normally.
 
 Also, David, thanks for pointing out the patch, because since I 
 applied it, I did not experienced anymore lockups (so far). I am
 betting it was indeed the problem.
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJShdk4AAoJEMrvovfl62c8DVEIALQmLbVLlnEsayXgpvCNiO2g
gWF0+L4haMA7Rhf7FvRqOpXxCcZVhxk5ocEvSHLnyG1iYfh3tlnq1ts8rk9dfSHT
DP1QA0ReXvVJKW2r8UcLVfI62H6gA93TiFZWLzFioO6NZExKlfe3DCWDg3scBqg3
dZFE7fcQW5iUjOdKJzw79DBTN1FlQUxeZ5EAGXN19XZAezbHP08KmmyAkil7jvqf
DRFVRT7xnh0Vqa5H6Iz4KrQcasIPiLnt6ggxRzCxXL2EKu8K5Htwc9/LD4Jynz6y
YVPKEPrL0lJ03ocb+U47vSynTfFWjDbOdKeIikqhUFDccfwTWUtefSVGmTzzdgQ=
=tyuk
-END PGP SIGNATURE-



Re: QEMU CPU cores not showing up

2013-11-14 Thread InterNetX - Robert Garrett
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

The issue you outlined below is not an openbsd issue, this is a kvm
issue. and depends greatly on the version of linux/whatever you are
using. The interrupt remapping you are talking about is either a bios
issue (likely) or an issue with the hypervisor.

it sounds like to me you are using or attempting to use SRIOV.

all of the issues that you mentioned are still relevent even with
safe interrupts, as well as several you did not mention.

RG

On 11/14/2013 03:15 PM, Giancarlo Razzolini wrote:
 Em 14-11-2013 11:43, David Coppa escreveu:
 On Thu, Nov 14, 2013 at 2:33 PM, Giancarlo Razzolini 
 grazzol...@gmail.com wrote:
 Em 13-11-2013 22:40, Jeff Fuhrman escreveu:
 I'm the tech Bruno has been working with regarding this. QEMU
 version is 1.5 and the relevant section of the KVM Config
 file is  vcpu4/vcpucputopology sockets='1' cores='4'
 threads='1'//cpu. We've tried it with 2 sockets, with 4
 sockets, with 2 threads, 4 threads, and so on. ACPI and APIC
 are enabled for the KVM Container.
 
 Jeff Fuhrman Level 2 Technician - BlueVM
 I have the same issue using the same qemu version. Do you guys
 also experience random lockups? I've seem sometimes the OpenBSD
 VM sshd will simply stop answering. Also if I try to login
 directly through the VM's console, when I insert the username
 it will not prompt me for a password. The strangest thing is,
 the machine still answer ping packets. I could not debug it
 yet, since it happens randomly. I have to force a shutdown to
 be able to access the machine again.
 Have you applied the patch for the errata below?
 
 for 5.4:
 
 http://ftp.openbsd.org/pub/OpenBSD/patches/5.4/common/003_vnode.patch


 
or for 5.3:
 
 http://ftp.openbsd.org/pub/OpenBSD/patches/5.3/common/010_vnode.patch

 
Not yet David, will look into it. I am moving almost all of my
 infrastructure servers to virtualized ones. Even my firewall is 
 virtualized now. But I am experienced these random lockups now and
 then. Will apply the patch and test it again.
 
 I do have another issue with running an OpenBSD guest in which it
 wont do interrupt remapping so I have to enable an unsafe behavior
 on kvm which allows it to do pci passthrough with unsafe
 interrupts. There are some issues using this in which a privileged
 user in the guest machine could escalate it's privileges on the
 host and/or crash it. Anyway, this isn't a problem for me right
 now, when I do have some time I'll look into it.
 
 Thanks,
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJShPfBAAoJEMrvovfl62c88fcIAIhs4nW2+Tv/TMlg/+ePvPpD
o5twuabaHfim9iYMqyAHQEztR8Nm4eFWilrFE3AZP2zvoPHLvxWuApZe1rr03FIy
CUnPlzhde+e38ggC0r5OQkV3tURpEWr3Uk7Yjzr2hxg47/syX15XYSEERtaSAaOY
3vv8Kt3IFXVZFHg+EM9dQCMMrNuXwxp2eg7Gej7S2Gv6mO7yWyniM7uhLTrqGwtP
AFx36o6XSMzxqq4ooN8/seMMlnP075o45b8rhKHRRX4BgZ7eRI5z+ZglVJF9wSo7
GNPQZGWqwpfACDREOY/U0rmk4iG+RwBplKhprCZgnsvoQAJfdbFcOPVnzUDbpYQ=
=lvPc
-END PGP SIGNATURE-



Re: Best OpenBSD cloud hosting?

2013-10-10 Thread InterNetX - Robert Garrett

I just want to know what a cloud is.

On 10/09/2013 09:05 PM, Dorian H. wrote:

I've got a few OpenBSD boxes running at TransIP, very satisfied about it.
QEMU/KVM based, and they recently added a new feature, 'private
networks' between
two or more VPS's.

It might not explicitly have the label 'cloud' attached to it, but
still very nice; and quite cheap as well.


On Wed, Oct 9, 2013 at 8:45 PM, Antoine Jacoutot ajacou...@bsdfrog.org wrote:

On Wed, Oct 09, 2013 at 02:31:02PM -0400, Jiri B wrote:

What about Joyent? They ported KVM from Linux to Solaris
and they run it under zones. I would trust more Solaris based
solution they some hackish Linux setups where every VM runs under
root :)


I personally use SmartOS and while it is an awesome system, OpenBSD does not 
always behave perfectly well under Solaris KVM.
I've had several vdisk related issues.
In my experience, Linux KVM is a better container for our OS.

--
Antoine




Re: Sorry OpenBSD people, been a bit busy

2013-10-07 Thread InterNetX - Robert Garrett
Because people, are idiots, and like to attack others who do useful 
things. Keep your head up.


RG

On 10/07/2013 02:48 AM, dera...@cvs.openbsd.org wrote:

Hi, yeah, it is really me.  I find it strange posting to misc,
starting an email thread.  Normally I finish the threads here.

Most OpenBSD developers have known for a while, but I think it is
important to tell the greater community that I've been a bit busy for
about the last year.  I have not been paying as much attention to
OpenBSD development as I'm expected to.  Luckily, other developers
have done a great job keeping it on track.

Why?  With a group of others, I started setting up an Internet
Exchange in Calgary, and this has taken much time because it is highly
politicized and has encountered some resistance.

http://yycix.ca
https://en.wikipedia.org/wiki/YYCIX_Internet_Exchange_Community_Ltd

Now, why do I mention this in relation to OpenBSD?  Well, at the end
of 2007 someone decided to open an impersonation account on twitter in
my name, and start sending a mix of things I have said (see wikiquote
for instance), with things that I would never say.  That account is
http://twitter.com/theoderaadt

A few notes:  The account has now changed to declare that it is a
parody account and renamed to Not Theo de Raadt, as of a few days
ago.  If you read back into the past, you will see true character of
the account and the individual.

People in the local community were directed to the account, to give a
negative, if not slanderous, view of my character.  The ones directing
them have high-profile roles in the community, so people would take
what they say as true.  Since I am the network manager for the
exchange equipment, this by extension was meant to hurt YYCIX.

Why would stewards of important infrastructure projects deliberately
spread such false stories?

I will not mention names.  I don't need to; many can dig a little and
figure out who those actors are.  As a hint, search a little bit
higher.

Finally, one thing that particularily bothers me in the old postings
is the mention of my old friend Itojun, a very dedicated developer of
IPv6.  As many of you know, he and John Postel are the only two
internet architects currently honoured on an annual basis by the
Internet Society in the form of an award.

http://www.internetsociety.org/what-we-do/grants-and-awards/awards/itojun-service-award

Layers of hurt being thrown around.  Why?




Mit freundlichen Grüßen

Robert Garrett
Senior System Engineer
Technical Projects  Solutions
--
InterNetX GmbH
Maximilianstr. 6
93047 Regensburg
Germany

Tel. +49 941 59559-480
Fax  +49 941 59559-245

www.internetx.com
www.facebook.com/InterNetX
www.twitter.com/InterNetX

Geschäftsführer/CEO: Thomas Mörz
Amtsgericht Regensburg, HRB 7142



Re: Sorry OpenBSD people, been a bit busy

2013-10-07 Thread InterNetX - Robert Garrett
People who attack each, other with nothing but the defamation of the 
other individual, at heart are idiots. Sometimes, in the course of 
normal discussions.. things get out of hand, I really dont care about 
this. I prefer people to attack ideas, not each other.


RG


On 10/07/2013 10:43 AM, James Griffin wrote:

* hru...@gmail.com hru...@gmail.com [2013-10-07 08:36:04 +]:


dera...@cvs.openbsd.org wrote:


Layers of hurt being thrown around.  Why?


This is a legitim question.

Since I am here, I think I received twice an Email from you: I
remember you as a polite person. But I did read a little of what
people write about you arround.

Some weeks ago a question of me here produced unfortunately too much
traffic. I was critical to the optimism in Tridgelll doctoral
thesis, about the rsync algorithm, about new programming technics
that seem to allow the use of hash values as a unique key. If the
question was a little off-topic, then it was not anymore as some
people here felt attacked by my critic. I was continously exposed
to insult and defamation. I continously tried to keep the discussion
objective, without much success. I asked me the very same question
you ask, I ask me it till now. And of course I tried to find an answer.
And the answer of Robert Garrett throw new questions: Because people
are idiots? Then we all are idiots and cannot compain. Or only people
that do usefull things can complain and other do not deserve respect?

Rodrigo.



In fairness, you were repeating yourself a great deal and filling up our 
inboxes with the same statements. It went on for days and became tiresome. That 
was the main complaint, not the mathematical arguments you were put to the list.




Mit freundlichen Grüßen

Robert Garrett
Senior System Engineer
Technical Projects  Solutions
--
InterNetX GmbH
Maximilianstr. 6
93047 Regensburg
Germany

Tel. +49 941 59559-480
Fax  +49 941 59559-245

www.internetx.com
www.facebook.com/InterNetX
www.twitter.com/InterNetX

Geschäftsführer/CEO: Thomas Mörz
Amtsgericht Regensburg, HRB 7142



Re: 10GbE (Intel X540) performance on OpenBSD 5.3

2013-08-08 Thread InterNetX - Robert Garrett
The X540 is capable of line rate, the question is more does the hardware 
around it support it.. traffic testing with linux, and freebsd
has shown this to be the case. I do not have specific openbsd data 
regarding this.. but I know that you can peg 10 gigabit with that card.


RG

On 08/07/2013 09:40 PM, Florian Obser wrote:

On Wed, Aug 07, 2013 at 12:57:55PM -0400, Maxim Khitrov wrote:

On Wed, Aug 7, 2013 at 11:44 AM, Florian Obser flor...@narrans.de wrote:

On Wed, Aug 07, 2013 at 10:26:22AM -0400, Maxim Khitrov wrote:
[...]

Increasing the MTU on both ix0 interfaces to 9000 gives me ~7.2 Gbps:


you expect a lot of jumbo frames in front of / behind your firewall?
(if the answer is no, why are you testing that?)


It's a possibility. What this tells me, however, is that the the
throughput isn't the (main) problem. The per-packet processing
overhead appears to be the limiting factor, which is why I asked about


indeed, during my tests systat showed that the system is spending 99% in
interrupt handlers. Having context switches because you are running
iperf localy is not good[tm] in this situation.


checksum offloading.


anyway, I was testing an Intel 82599 system in July which will become
a border router. All of this is forwarding rate; it took me 2 days to
beg, borrow and steal enough hw to actually generate the traffic.  (I
had 4 systems in front of and 4 systems behind the router, all doing
1Gb/s)


What tools were you using to generate the traffic and to calculate
bytes/packets per second? I assume interrupts per second came from
systat?



right, the interrupt rate came from systat, traffic was generated with
iperf and measured with bwm-mg in 30 second average mode.
iperf was running in dualtest mode and instructed to run for an hour
so that I had a chance to start all iperfs before the first one
would finish ;) no other switches (besides -c and -s of course).




Mit freundlichen Grüßen

Robert Garrett
Senior System Engineer
Technical Projects  Solutions
--
InterNetX GmbH
Maximilianstr. 6
93047 Regensburg
Germany

Tel. +49 941 59559-480
Fax  +49 941 59559-245

www.internetx.com
www.facebook.com/InterNetX
www.twitter.com/InterNetX

Geschäftsführer/CEO: Thomas Mörz
Amtsgericht Regensburg, HRB 7142



Re: Bug-report: Firefox crashing in recent snapshots

2013-07-25 Thread InterNetX - Robert Garrett

Its to much to ask system admins to properly adjust these values?

but then again, why is a sys admin using FireFox on a openbsd machine?
it could be his workstation.. I wont argue with somebody's choice of a
workstation.


However he should adjust login to allow for that..


but why does Firefox not degrade gracefully this is the real issue..
not if some value has  been bumped...


On 07/24/2013 03:42 PM, Marc Espie wrote:

On Wed, Jul 24, 2013 at 03:04:28PM +0200, Landry Breuil wrote:

That point has been a long-standing discussion among developers, and
a consensus hasn't been reached yet. Note that iirc, chromium wrapper
automatically bumps ulimit -d at startup to workaround such issues..


Actually the main current issue is that 'one size does NOT fit all'.

you don't want the same data size on an amd64 with 6G of physical memory
and a lowly sparc with 32M...

That's the main issue with login.conf, and this will probably require a
bit of code to get properly fixed eventually.




Mit freundlichen Grüßen

Robert Garrett
Senior System Engineer
Technical Projects  Solutions
--
InterNetX GmbH
Maximilianstr. 6
93047 Regensburg
Germany

Tel. +49 941 59559-480
Fax  +49 941 59559-245

www.internetx.com
www.facebook.com/InterNetX
www.twitter.com/InterNetX

Geschäftsführer/CEO: Thomas Mörz
Amtsgericht Regensburg, HRB 7142