On 7/11/10 9:15 AM, John McMonagle wrote: > Tom > > Did more tests. > All tests except for throughput are via vpn. > Did tests while copying a server install from one site to another. > Doing copying through vpn > Both have a t1 line at 1500kb. > with the tcdevices limits set very high get 1520kb.sec > Measured throughput with iptraf. > Ping time is mostly over 500ms. > > One at a time cut back in tcdevices both incoming and outgoing. > Rate always dropped to what it was set to. > > Here is the interesting part. > If I rate limited outgoing ping times were bad. over 500ms > If I rate limited incoming rates are very good. ~20ms
That is why I suggested that you cut back the input rate. It is better if you do it using the IFB's OUT-BANDWIDTH because that way, you get to choose which traffic gets dropped. If you do it with the IN-BANDWIDTH setting on the external interface, packets get discarded at random. > > Also noticed that when ping times are very bad between these 2 sites ping > times to other sites via openvpn are OK. > This is true from either site. > > Wild speculation is that excessive amount of packets are in the outgoing > openvpn queue and do not harm other links. > > Based on that I tried txqueuelen to 20 from the default 100 on the outgoing > sides openvpn setup and it seems to help a bit. > My knowledge of the details of networking are limited. > If the it runs out of transmit does it just wait? > I wonder how low one can safely set it. Don't know -- you will have to ask the OpenVPN folks. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ This SF.net email is sponsored by Sprint What will you do first with EVO, the first 4G phone? Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
