Evgeny Yurchenko wrote:


Then what are the options for someone who has traffic more than pfSense can take? For a example, a streamer with packet length of 1840 and 50kpps, that's 700Mb.
Is there a possibility of some sort of pfSense cluster?
Because as far as I understand, I have one of the fastest CPUs on the market, not counting the i7 and I still can't pass more than 50kpps with a packet length of 600, and that's just image files.

Thanks,

Lenny.

Lenny,

now I am experimenting a lot trying to find out why sometimes when there is heavy load CARP-master switches to stand-by and never comes back. I know this problem is different from yours but look at the performance I get on pretty old hardware.

UDP-stream generator ----> pfSense CARP cluster on HP DL360 G3 -----> receiver

This from receiver:
[ ID] Interval Transfer Bandwidth Jitter Lost/Total Datagrams [ 4] 350.0-360.0 sec 1.05 GBytes 903 Mbits/sec 0.013 ms 12/767479 (0.0016%) [ ID] Interval Transfer Bandwidth Jitter Lost/Total Datagrams [ 4] 360.0-370.0 sec 1.05 GBytes 902 Mbits/sec 0.013 ms 334/767174 (0.044%) [ ID] Interval Transfer Bandwidth Jitter Lost/Total Datagrams [ 4] 370.0-380.0 sec 1.05 GBytes 901 Mbits/sec 0.013 ms 8/766545 (0.001%) [ ID] Interval Transfer Bandwidth Jitter Lost/Total Datagrams [ 4] 380.0-390.0 sec 1.05 GBytes 903 Mbits/sec 0.015 ms 19/767586 (0.0025%)

This is on pfSense:
last pid: 44303; load averages: 0.08, 0.02, 0.00 up 3+07:30:11 23:14:56
89 processes:  6 running, 66 sleeping, 17 waiting
CPU:  0.1% user,  0.0% nice,  0.2% system, 15.7% interrupt, 83.9% idle
Mem: 44M Active, 10M Inact, 39M Wired, 76K Cache, 17M Buf, 1906M Free
Swap: 4096M Total, 4096M Free

 PID USERNAME  THR PRI NICE   SIZE    RES STATE  C   TIME   WCPU COMMAND
13 root 1 171 ki31 0K 8K CPU1 1 79.3H 100.00% idle: cpu1 11 root 1 171 ki31 0K 8K CPU3 3 79.3H 100.00% idle: cpu3 12 root 1 171 ki31 0K 8K RUN 2 79.1H 100.00% idle: cpu2 40 root 1 -68 - 0K 8K CPU0 0 30:17 54.20% irq30: bge1 14 root 1 171 ki31 0K 8K RUN 0 78.6H 41.06% idle: cpu0 39 root 1 -68 - 0K 8K WAIT 0 18:12 4.05% irq28: bge0

... and it results in approximately 76kpps.
And this is pretty old HP DL360 G3 with Broadcom NICs.
There must be some mystery in your set up. Your system MUST perform better.

Evgeny.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Commercial support available - https://portal.pfsense.org


Evgeny,

Now I'm totally lost:(

I had this long thread this year on this issue here and eventually the only thing the guys could advise me is to buy a newer server. I did. And while I do see an improvement in performance (it's about twice it was before) I'm still nowhere near what you have.

I realize that your traffic is lab UDP and mine is production TCP, so let's say you'd get half of that in production, but then still - you're only on 54% CPU. By the way, how come your second NIC is only loading the CPU 4%? Shouldn't it be pretty much like the first one? It's what I have.

I'm ready to show you my config/diagrams/whatever, but I need this issue resolved.

Please?


Lenny.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Commercial support available - https://portal.pfsense.org

Reply via email to