finding optimal ipfw strategy

[Eugene Grosbein]

28.08.2019 1:03, Andrey V. Elsukov wrote:

> As you can see, when ipfw produces high load, interrupt column is more
> than system.

Interrupt numbers higher than others generally mean that traffic is processed without netisr queueing mostly.
That is expected for plain routing. I'm not sure if this would be same in case of bridging.

Victor, do you have some non-default tuning in your /boot/loader.conf or /etc/sysctl.conf?
If yes, could you show them? If not, you should try something like this. For loader.conf:

hw.igb.rxd=4096
hw.igb.txd=4096
net.isr.bindthreads=1
net.isr.defaultqlimit=4096
#substitute total number of CPU cores in the system here
net.isr.maxthreads=4
# EOF

For /etc/sysctl.conf:

dev.igb.0.rx_processing_limit=-1
dev.igb.1.rx_processing_limit=-1
net.inet.ip.intr_queue_maxlen=40960

And if you haven't already seen it, you may find useful my blog post
(in Russian) https://dadv.livejournal.com/139170.html

It's a bit old but still can give you some light.