How make the route-to working ?

geoffroy desvernay dgeo at centrale-marseille.fr
Mon Feb 15 13:53:37 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 15.02.2010 11:56, Albert Shih wrote:
>  Le 13/02/2010 à 09:11:24+0100, geoffroy desvernay a écrit
>> Albert Shih a écrit :
>>> OK now it's working. But I have some big trouble about the bandwith. 
>>>
>>> Now when I try to do something like a scp, or ftp or wget from inside a
>>> jail to outside, everything work fine. The traffic go to right interface,
>>> the answer too. 
>>>
>>> But when I try to do some network connection (ssh, scp etc..) from outside
>>> to a jail the bandwith is catastrophic (~40kB/s on 1Gbit/s). 
>>>
>>> And for you ? 
>>>
>> Using this kind of setup since at least two years for ~500 real users
>> without complains... (three different 'ssh jails' on the same machine
>> with many vlans and three "default" gateways)
>>
> 
> OK I find the problem. It's come from TSO.
> 
> If I disable TSO by sysctl everything become «normal» and works fine. 
> 
> Thanks again for your help.
> 
You're welcome...

Just to be sure to get it: you do use an 'fxp' ethernet card and
7.2-RELEASE or not ?

(In other words, is it the fxp bug described here
http://www.freebsd.org/releases/7.2R/errata.html ?)

On the server I use, I've
server# sysctl -a|grep tso
net.inet.tcp.tso: 1

… without any (known) problem, on a:
FreeBSD 7.2-STABLE #3: Thu Sep 24 21:32:33 CEST 2009

with two bge(4) interfaces...

- -- 
*geoffroy desvernay*
C.R.I - Administration systèmes et réseaux
Ecole Centrale de Marseille

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkt5UdcACgkQGbFYzwF8gKrAVACfV9Kuq6jef7nQHzzRREvllCUg
7a8AoI4BhBP4WciZgrPSw1/E2TPkcflo
=spTC
-----END PGP SIGNATURE-----


More information about the freebsd-pf mailing list