packet loss with carp on 6.2

Klavs Klavsen kl at vsen.dk
Thu Oct 18 02:02:34 PDT 2007


Hi guys,

I have had a FreeBSD 6.2 (-p1 - yes I know :) firewall running for a
while, with pf fw rules. It has worked fine, and was a replacement for a
fbsd 4.x ipfw firewall.

Now I just replaced the 6.2 pf firewall, with a 6.2 (-p7) and carp
interfaces enabled. It's using the same cables and the same type of
network cards (bge and em). The new one, is a HP dl385 (amd) where the old
one, was a HP dl380 (Intel).

On the new one, fping (and ping -f) pinging through the firewall, gives me
a packet loss. fping in nagios, reports up to 55% packet loss :( - a ping
-f gives me 1-3%, but bad enough :(

pinging from the firewall itself, to one of the hosts, that packets are
lost to (when pinging from other networks) does not give any packet loss.

The old 6.2, had polling enabled - and I've tried to disable polling on
the new, but to no effect.

Any ideas what else to try?

-- 
Regards,
Klavs Klavsen, GSEC - kl at vsen.dk - http://www.vsen.dk
PGP: 7E063C62/2873 188C 968E 600D D8F8  B8DA 3D3A 0B79 7E06 3C62

"Those who do not understand Unix are condemned to reinvent it, poorly."
  --Henry Spencer



-- 
Regards,
Klavs Klavsen, GSEC - kl at vsen.dk - http://www.vsen.dk
PGP: 7E063C62/2873 188C 968E 600D D8F8  B8DA 3D3A 0B79 7E06 3C62

"Those who do not understand Unix are condemned to reinvent it, poorly."
  --Henry Spencer



More information about the freebsd-net mailing list