Re: PF performance problem

2009-07-18 Thread tico
Ariane van der Steldt wrote: On Wed, Jun 03, 2009 at 10:07:33PM -0700, patrick keshishian wrote: On Wed, Jun 3, 2009 at 3:50 AM, Richard Toohey richardtoo...@paradise.net.nz wrote: On 3/06/2009, at 10:02 PM, BARDOU Pierre wrote: Hello, I have performance issues on a OpenBSD

Re: PF performance problem

2009-06-04 Thread Ariane van der Steldt
On Wed, Jun 03, 2009 at 10:07:33PM -0700, patrick keshishian wrote: On Wed, Jun 3, 2009 at 3:50 AM, Richard Toohey richardtoo...@paradise.net.nz wrote: On 3/06/2009, at 10:02 PM, BARDOU Pierre wrote: Hello, I have performance issues on a OpenBSD 4.4 firewall. CPU load is OK (always

Re: PF performance problem

2009-06-04 Thread Darrin Chandler
On Wed, Jun 03, 2009 at 10:07:33PM -0700, patrick keshishian wrote: On Wed, Jun 3, 2009 at 3:50 AM, Richard Toohey richardtoo...@paradise.net.nz wrote: On 3/06/2009, at 10:02 PM, BARDOU Pierre wrote: Hello, I have performance issues on a OpenBSD 4.4 firewall. CPU load is OK (always

Re: PF performance problem

2009-06-04 Thread patrick keshishian
On Thu, Jun 4, 2009 at 1:48 AM, Ariane van der Steldt ari...@stack.nl wrote: On Wed, Jun 03, 2009 at 10:07:33PM -0700, patrick keshishian wrote: On Wed, Jun 3, 2009 at 3:50 AM, Richard Toohey richardtoo...@paradise.net.nz wrote: On 3/06/2009, at 10:02 PM, BARDOU Pierre wrote: Hello, I

Re: PF performance problem

2009-06-04 Thread patrick keshishian
On Thu, Jun 4, 2009 at 6:48 AM, Darrin Chandler dwchand...@stilyagin.com wrote: On Wed, Jun 03, 2009 at 10:07:33PM -0700, patrick keshishian wrote: On Wed, Jun 3, 2009 at 3:50 AM, Richard Toohey richardtoo...@paradise.net.nz wrote: On 3/06/2009, at 10:02 PM, BARDOU Pierre wrote: Hello,

PF performance problem

2009-06-03 Thread BARDOU Pierre
Hello, I have performance issues on a OpenBSD 4.4 firewall. CPU load is OK (always below 50%), but system load is always between 1 and 1.5, it may go up to 2 sometimes. I suspected an I/O problem on the HDD because of pflogd, so I shut it down and the system load is always as high. Could you

Re: PF performance problem

2009-06-03 Thread Jordi Espasa Clofent
PF works like a charm. Without doubt. Despite of that, PF don't require the HD and the main bottlenecks are de CPU and memory (and NIC and the driver, of course). I suspect an error in your PF logging system. PD. 'Urgent' means the same words says: urgent. If you see some message related to

Re: PF performance problem

2009-06-03 Thread Michiel van Baak
On 12:02, Wed 03 Jun 09, BARDOU Pierre wrote: Hello, I have performance issues on a OpenBSD 4.4 firewall. CPU load is OK (always below 50%), but system load is always between 1 and 1.5, it may go up to 2 sometimes. Is the system really slow ? Or are you basing this 'performance issue' on

Re: PF performance problem

2009-06-03 Thread Richard Toohey
On 3/06/2009, at 10:02 PM, BARDOU Pierre wrote: Hello, I have performance issues on a OpenBSD 4.4 firewall. CPU load is OK (always below 50%), but system load is always between 1 and 1.5, it may go up to 2 sometimes. [cut] And what is the actual *problem*? What is pf failing to do? Or

Re: PF performance problem

2009-06-03 Thread BARDOU Pierre
... -- Cordialement, Pierre BARDOU -Message d'origine- De : Richard Toohey [mailto:richardtoo...@paradise.net.nz] Envoyi : mercredi 3 juin 2009 12:50 @ : BARDOU Pierre Cc : misc@openbsd.org Objet : Re: PF performance problem On 3/06/2009, at 10:02 PM, BARDOU Pierre wrote: Hello, I have

Re: PF performance problem

2009-06-03 Thread Jordi Espasa Clofent
BARDOU Pierre escribis: The only problem I noticed is an abnormally long ping (usually 0.3ms, sometimes -3 or 4 times a day says nagios- up to 30ms). M... maybe it's not a PD-related issue. Check your network. Despite of that, check the ICMP rules; use tcpdumo(1) also to debug it. I am

Re: PF performance problem

2009-06-03 Thread BARDOU Pierre
Thanks everybody for the help. I will stop worrying about the system load and wait a noticeable performance problem before asking for help :) I set pfctl -x urgent, and now I'm waiting for something in /var/log/messages... -- Cordialement, Pierre BARDOU

Re: PF performance problem

2009-06-03 Thread patrick keshishian
On Wed, Jun 3, 2009 at 3:50 AM, Richard Toohey richardtoo...@paradise.net.nz wrote: On 3/06/2009, at 10:02 PM, BARDOU Pierre wrote: Hello, I have performance issues on a OpenBSD 4.4 firewall. CPU load is OK (always below 50%), but system load is always between 1 and 1.5, it may go up to 2