Maximum throughput ? limit?
Bartek W. aka Mastier
mistrzipan at gmail.com
Thu Jan 19 16:27:17 UTC 2012
W dniu 19.01.2012 16:39, Adam PAPAI pisze:
> Dear List,
>
> I feel my freebsd box is reaching his limits.
>
> I'm doing load-balance with a pf (round-robin + NAT) in front of 3 web
> and 3 database servers. Everything works fine with 100-120MBit/s, but
> if it reaches over 150MBit/s to 200MBit/s or even 300MBit/s, the
> connections are stucked, nobody can connect to the server.
>
> I checked it via "nload". And every time it goes over 150MBit/s it
> stars to drop some connections.
>
> I have 40,000 connections at the same time.
>
> Could it be because the pf? I mean it reaches some maximum throughput?
>
> When i'm running the iperf from inside the NAT, it does only
> 300-400MBit/s, but if I'm running it from the firewall itself, it does
> 600-700 (it depends on the traffic). The servers are connected to each
> other via GBit.
>
> Thanks in advance,
>
>
Indeed. The default maximum is 10 000 states as I remember.
I.e. one of the main routers in my case. core quad.
set limit { states 300000, frags 10000, src-nodes 100000 }
More information about the freebsd-pf
mailing list