On Thu, Jun 30, 2011 at 11:16 AM, William Salt <[email protected]> wrote: > Attached is the ifconfig, sysctl and pfcrl results from each > firewall/router. > If someone could look at them and suggest anything, i would be > eternally grateful! :) > Has anyone got a similar config they could possibly share? (1gb link, 132ms > RTT)
Looking at your state table i see that the max of data you have in transit is at 65K average and only few states with 262K in transit. This may suggest that your application buffers are set at this limit and this need to be tuned in the application machine and not pfsense. > > Regards > Will > > On Wed, Jun 29, 2011 at 6:14 PM, Chase Bolt <[email protected]> wrote: >> >> On Wed, Jun 29, 2011 at 5:16 AM, William Salt >> <[email protected]> wrote: >>> >>> Hi all, thanks for the input. >>> We have now swapped the cards to em card at both ends, instead of igb at >>> one end, and em at the other. We are now seeing near gig speeds in both >>> directions. Before, we saw very different speeds in each direction. >>> We have now managed to reach around 860-900mbps each way with the >>> following values in our sysctl.conf: >>> >>> kern.ipc.maxsockbuf=20971520 >>> net.inet.tcp.recvbuf_max=20971520 >>> net.inet.tcp.sendbuf_max=20971520 >>> net.inet.tcp.recvbuf_inc=524288 >>> net.inet.tcp.sendbuf_inc=524288 >>> However, even though we can reach around the upper threshold of the >>> connection, we are seeing the boxes crash, or tcp performance hit the >>> miximum 860-900mbps then drop, and stick at around 8mbps, until a reboot. >>> >>> I might add that we are running 32bit (i386) RC3 at both ends, with 6gb >>> of ram.(probably alot less in the OS, need to upgrade to x64) >>> When i replicated these settings on two fresh boxes beyong the routers at >>> either end, i saw no performance increase... >>> Regards >>> Will >> >> Well that makes me uneasy about igb cards... I also have igb cards in my >> pfsense boxes waiting to upgrade to 2.0 final so I can start using them in >> production. >> >> Thanks, >> Chase Bolt > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > > Commercial support available - https://portal.pfsense.org > -- Ermal --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected] Commercial support available - https://portal.pfsense.org
