How make the route-to working ?
geoffroy desvernay
dgeo at centrale-marseille.fr
Mon Feb 15 13:53:37 UTC 2010
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 15.02.2010 11:56, Albert Shih wrote:
> Le 13/02/2010 à 09:11:24+0100, geoffroy desvernay a écrit
>> Albert Shih a écrit :
>>> OK now it's working. But I have some big trouble about the bandwith.
>>>
>>> Now when I try to do something like a scp, or ftp or wget from inside a
>>> jail to outside, everything work fine. The traffic go to right interface,
>>> the answer too.
>>>
>>> But when I try to do some network connection (ssh, scp etc..) from outside
>>> to a jail the bandwith is catastrophic (~40kB/s on 1Gbit/s).
>>>
>>> And for you ?
>>>
>> Using this kind of setup since at least two years for ~500 real users
>> without complains... (three different 'ssh jails' on the same machine
>> with many vlans and three "default" gateways)
>>
>
> OK I find the problem. It's come from TSO.
>
> If I disable TSO by sysctl everything become «normal» and works fine.
>
> Thanks again for your help.
>
You're welcome...
Just to be sure to get it: you do use an 'fxp' ethernet card and
7.2-RELEASE or not ?
(In other words, is it the fxp bug described here
http://www.freebsd.org/releases/7.2R/errata.html ?)
On the server I use, I've
server# sysctl -a|grep tso
net.inet.tcp.tso: 1
… without any (known) problem, on a:
FreeBSD 7.2-STABLE #3: Thu Sep 24 21:32:33 CEST 2009
with two bge(4) interfaces...
- --
*geoffroy desvernay*
C.R.I - Administration systèmes et réseaux
Ecole Centrale de Marseille
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAkt5UdcACgkQGbFYzwF8gKrAVACfV9Kuq6jef7nQHzzRREvllCUg
7a8AoI4BhBP4WciZgrPSw1/E2TPkcflo
=spTC
-----END PGP SIGNATURE-----
More information about the freebsd-pf
mailing list