performance of jailed processes

[Robert Watson]

On Wed, 31 Mar 2004, Dag-Erling Smørgrav wrote:

> Robert Watson <rwatson at FreeBSD.org> writes:
> > I'd be very interested in knowing if changing your application to bind
> > alternative IP addresses rather than using jail to force the binding to an
> > alternative address changes the performance results.  I.e., are we looking
> > at a problem with additional aliases and not a problem with jail at all...
> 
> I reproduced the problem with scp, then threw in -oBindAddress=foo.  It
> seems you're on to something; running it outside any jail but bound to
> one of the aliases gave the same symptoms as running it from inside a
> jail. 

Are your aliases configured on lo0, or on the ethernet interface?  Could
we see some excerpted ifconfig output for your interface (perhaps only ten
-- first five, last five of the 2000+ IP addresses :-). 

Robert N M Watson             FreeBSD Core Team, TrustedBSD Projects
robert at fledge.watson.org      Senior Research Scientist, McAfee Research