Low network performance after upgrade from FreeBSD 4.8 to 6.0

[Kris Kennaway]

On Mon, Mar 20, 2006 at 02:10:20PM +0100, Bohuslav Plucinsky wrote:

> The "top" utility shows 100% CPU load:

What about top -S to show the kernel threads (since that's what's
using 90% of your CPU)?

> last pid:   771;  load averages:  0.25,  0.06,  0.02                                                                   up 0+00:24:30  14:08:32
> 27 processes:  2 running, 25 sleeping
> CPU states:  8.8% user,  0.0% nice, 59.6% system, 31.6% interrupt,  0.0% idle
> Mem: 16M Active, 4752K Inact, 11M Wired, 8144K Buf, 22M Free
> Swap: 500M Total, 500M Free
> 
>   PID USERNAME  THR PRI NICE   SIZE    RES STATE    TIME   WCPU COMMAND
>   229 root        1 105    0  1428K   904K RUN      0:35 40.82% natd

> options		MROUTING		# Multicast routing

Do you actually use this?

> options         IPFIREWALL              #firewall
> options         IPFIREWALL_VERBOSE      #print information about dropped packets
> options         IPFIREWALL_FORWARD      #enable transparent proxy support
> options         IPFIREWALL_FORWARD_EXTENDED     #all packet dest changes
> options         IPSTEALTH               #support for stealth forwarding
> options		IPDIVERT		#divert sockets
> options		TCPDEBUG
> options 	IPSEC_DEBUG		#debug for IP security

Why do you define the DEBUG settings?  They'll only slow you down, but
it's probably not the main reason.

> options		DUMMYNET
> options 	TCP_DROP_SYNFIN		#drop TCP packets with SYN+FIN
> options 	INCLUDE_CONFIG_FILE     # Include this file in kernel
> options 	IPSEC			#IP security
> options 	IPSEC_ESP		#IP security (crypto; define w/ IPSEC)

Better to use fast ipsec unless you have a need for ipv6.

Kris
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-net/attachments/20060320/9a68f4de/attachment.pgp