Re: [pfSense Support] Can't get more than 15kpps.

2008-12-21 Thread Lenny
RB wrote: On Sat, Dec 20, 2008 at 15:45, Lenny five2one.le...@gmail.com wrote: Another weird thing I noticed is that when looking at RRD graphs I suddenly see a blank space, like this: -- -- . And it shows on all the graphs at the same time. I've also noticed that it's

Re: [pfSense Support] Can't get more than 15kpps.

2008-12-21 Thread Lenny
Bill Marquette wrote: On Sat, Dec 20, 2008 at 4:45 PM, Lenny five2one.le...@gmail.com wrote: Hi, I'm kind of desperate here, so please try to help me. Here's my problem: I have a setup in production (a very dynamic website). It consists of pfsense--Alteon Load Balancer--IBM

Re: [pfSense Support] Can't get more than 15kpps.

2008-12-21 Thread Michael Schuh
Hi, the proxy-arp is nothing to see on your box, may be the equipement of your provider could need it. see if it is enabled with the sysctl-utility. Afaik it is no way to configure it in the web-frontend. You hava to made following config in your xml-config: !--V---directly after this

Re: [pfSense Support] Can't get more than 15kpps.

2008-12-21 Thread RB
On Sun, Dec 21, 2008 at 01:00, Lenny five2one.le...@gmail.com wrote: actually, the blank spaces in RRD during the load made me believe it was a firewall issue for sure. Regarding the CPU, I only used the RRD graphs. But you're probably right, I should use top. The gaps in the graph only

Re: [pfSense Support] Can't get more than 15kpps.

2008-12-21 Thread Michael Schuh
Hi, I can't speak to the proxy-arp bit, but don't see how that particular configuration (or lack thereof) would so steeply limit PPS. Oh not to understand as its limit the packets per second, but you get not all the time answers from the isps-gateway, because it need proxyarp. In my

Re: [pfSense Support] Can't get more than 15kpps.

2008-12-21 Thread RB
On Sun, Dec 21, 2008 at 10:34, Michael Schuh michael.sc...@gmail.com wrote: Oh not to understand as its limit the packets per second, but you get not all the time answers from the isps-gateway, because it need proxyarp. So your particular ISP expected to see the L2 addresses for your public IPs

Re: [pfSense Support] Can't get more than 15kpps.

2008-12-21 Thread Lenny
RB wrote: On Sun, Dec 21, 2008 at 10:34, Michael Schuh michael.sc...@gmail.com wrote: Oh not to understand as its limit the packets per second, but you get not all the time answers from the isps-gateway, because it need proxyarp. So your particular ISP expected to see the L2

Re: [pfSense Support] Can't get more than 15kpps.

2008-12-21 Thread Michael Schuh
2008/12/21 RB aoz@gmail.com On Sun, Dec 21, 2008 at 10:34, Michael Schuh michael.sc...@gmail.com wrote: Oh not to understand as its limit the packets per second, but you get not all the time answers from the isps-gateway, because it need proxyarp. So your particular ISP expected to

Re: [pfSense Support] Can't get more than 15kpps.

2008-12-21 Thread Michael Schuh
another idea is to monitor everything whats going on on the firewall with sa(r) and accounting, but i don't know if sa and accounting is shipped with the pfsense.. 2008/12/21 Michael Schuh michael.sc...@gmail.com 2008/12/21 RB aoz@gmail.com On Sun, Dec 21, 2008 at 10:34, Michael

Re: [pfSense Support] Can't get more than 15kpps.

2008-12-21 Thread RB
On Sun, Dec 21, 2008 at 11:21, Lenny five2one.le...@gmail.com wrote: actually, they couldn't download higher than 30Mbs or so from each client (although they said they have the line for it), so they initiated about 6 of those connections. Does this help in any way? Unfortunately not - it's

Re: [pfSense Support] Can't get more than 15kpps.

2008-12-21 Thread Chris Buechler
On Sun, Dec 21, 2008 at 1:21 PM, Lenny five2one.le...@gmail.com wrote: I know for sure that my ISP routed the network. Should I not bother with the proxyarp solution? Don't touch proxy ARP, the chances of that causing a performance problem are virtually nil, and if the network is being routed

Re: [pfSense Support] Can't get more than 15kpps.

2008-12-21 Thread Michael Schuh
2008/12/21 Chris Buechler c...@pfsense.org On Sun, Dec 21, 2008 at 1:21 PM, Lenny five2one.le...@gmail.com wrote: I know for sure that my ISP routed the network. Should I not bother with the proxyarp solution? Don't touch proxy ARP, the chances of that causing a performance problem