Re: [pfSense Support] Tunning pfsense for really heavy loads

2008-08-16 Thread Aliet Santiesteban Sifontes
Aliet Santiesteban Sifontes wrote: Hi all, I'm currently migrating an existing Sun Netra T1 100 box Next monday I will start testing the new enviroment on a new paralell setup, I'm using 1.2.1 snaps, since 1.2 doesn't boots fine on Proliant ML350G4, 1.2 show a very slow boot time specially

Re: [pfSense Support] Tunning pfsense for really heavy loads

2008-08-15 Thread Paul Mansfield
we have fairly moderate usage using 1.2-release full install on a core2duo, using the intel e1000 nics on board tyan S5391 motherboard. the numbers are: memory: 10% (of 2GB) CPU: 2% usage on average, typically 2% interrupt (peaking to about 5%), 0.5% system (peaking to 1%). mbuf usage:

Re: [pfSense Support] Tunning pfsense for really heavy loads

2008-08-15 Thread Paul Mansfield
Paul Mansfield wrote: CPU: 2% usage on average, typically 2% interrupt (peaking to about 5%), 0.5% system (peaking to 1%). p.s. that's a core2duo 6600, 2.4GHz (sysctl -a | egrep -i 'hw.machine|hw.model|hw.ncpu') - To

Re: [pfSense Support] Tunning pfsense for really heavy loads

2008-08-15 Thread Paul Mansfield
Aliet Santiesteban Sifontes wrote: Hi all, I'm currently migrating an existing Sun Netra T1 100 box what kind of switches are you using? if they're equally old, they could also form a bottlenck on performance. you might want to consider upgrading them too, to cisco 3560G or even 3560E if you

[pfSense Support] Tunning pfsense for really heavy loads

2008-08-14 Thread Aliet Santiesteban Sifontes
Hi all, I'm currently migrating an existing Sun Netra T1 100 box running Solaris 8 and Checkpoint Firewall 1, wich has run for 9 years, to a PFSense, on a HP Proliant ML350 G4 server with 2 GB Ram, a Xeon Dual Core at 3GHz bus 800 MHz, three attached network, one at 1 GBps, and 2 at 100 MBps, it

Re: [pfSense Support] Tunning pfsense for really heavy loads

2008-08-14 Thread RB
I think, 500k connections are quite possible (from anecdotal evidence posted to this list). They will cost about 500 MB RAM. It's also a question of how many packets per second you want to route. Ditto (almost). 3-500k states is not really that high of a load, not knowing your throughput or

Re: [pfSense Support] Tunning pfsense for really heavy loads

2008-08-14 Thread Bill Marquette
On Thu, Aug 14, 2008 at 6:11 PM, RB [EMAIL PROTECTED] wrote: Two suggestions: search the list archives and find the multitude of answers to this question, and find out what your current PPS and bandwidth throughput is. Unless you're actually pushing Gig-E speeds, it's doubtful you'll even

Re: [pfSense Support] Tunning pfsense for really heavy loads

2008-08-14 Thread RB
You'll be happy with the ML350 - it's not even a fair comparison against that Sun box. Very much agree - even though not routing-specific, I have fond memories of the disk throughput on the ML370-G3. I even put pfSense on one at one point and ended up going back to a Dell 2550 because I just

Re: [pfSense Support] Tunning pfsense for really heavy loads

2008-08-14 Thread Aliet Santiesteban Sifontes
Well, my pps requirements are 500 kpps, we expect to improve to 400 MBps on our wan link, the other two attached networks, one fixed at 100 mbps, the other will have 1 Gbps link, three network cards, 1 PCI-X and two PCI cards, right now our main problem is the fact that we receive many short

Re: [pfSense Support] Tunning pfsense for really heavy loads

2008-08-14 Thread Bill Marquette
On Thu, Aug 14, 2008 at 10:14 PM, Aliet Santiesteban Sifontes [EMAIL PROTECTED] wrote: Well, my pps requirements are 500 kpps, we expect to improve to 400 In lab testing of FreeBSD 6.2, I ran out of horsepower on my two test boxes (HP DL145G2 - dual core Opteron boxes) generating around 400k pps