Re: Performance/lockup issues with FreeBSD as a router

From: Charles Swiger (cswiger_at_mac.com)
Date: 05/26/05

  • Next message: Peter Kieser: "Re: Performance/lockup issues with FreeBSD as a router" 
    Date: Thu, 26 May 2005 14:44:29 -0400
To: Peter Kieser <pfak@telus.net>

    On May 26, 2005, at 1:47 PM, Peter Kieser wrote:
    > The nics are if_dc, this is a stock FreeBSD 5.4-RELEASE
    > installation (no
    > firewall or anything):
    >
    > Here's my /etc/sysctl.conf:
    >
    > net.inet.ip.rtexpire=1800
    > net.inet.ip.rtminexpire=1800
    > kern.maxfiles=32768
    > kern.maxfilesperproc=32768
    > kern.ipc.somaxconn=32767
    > net.inet.tcp.sendspace=256000
    > net.inet.tcp.recvspace=256000
    > kern.ipc.maxsockbuf=2097152
    > net.inet.ip.fastforwarding=1
    > net.inet.tcp.rfc1323=1
    > net.link.ether.inet.max_age=600
    > net.inet.tcp.msl=7500
    > net.inet.ip.fw.dyn_udp_lifetime=10
    > net.inet.ip.fw.dyn_buckets=1024
    >
    > And here's my /boot/loader.conf:
    >
    > kern.ipc.maxsockets="163840"
    > kern.maxusers="2048"
    >
    > Is there anythign I'm overlooking that would be causing the machine
    > to lockup
    > like this?

    Your settings are tuned so high that you may be running out of KVA
    memory. I bet the system would be happier if you let maxusers
    autotune itself (and then maybe adjust it by a factor of 2 from
    there), and if you reduced kern.maxfilesperproc to 2048 or less, and
    reduced the TCP sendspace to 65K.

    [ As a last resort, you might even try nixing the fastforwarding
    option. It's well-suited for your task, and you do want it on if it
    is working right, but maybe try running without it for a test. ] 

    -- 
-Chuck
_______________________________________________
freebsd-performance@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-performance
To unsubscribe, send any mail to "freebsd-performance-unsubscribe@freebsd.org"
  • Next message: Peter Kieser: "Re: Performance/lockup issues with FreeBSD as a router"

    Relevant Pages

    • Re: Updates now max out IEs agent string length, causing problems
      ... causing some kind of issue in your network. ... I am using Active Directory, Filtering, Firewall, ...
      (microsoft.public.windowsupdate)
    • Re: Zone Alarm slowed download speed
      ... Of course I'm running Sygate now but my problem cleared up immediately after ... version of ZA that was causing the problems. ... > router firewall than all the power too them. ... I've been doing computers since the 1970's and have ...
      (alt.sys.pc-clone.dell)
    • Re: Where did the icon for my sound go?
      ... What about a firewall? ... | the sound link and was able to put the control back on my task bar. ... | to know what's causing these problems or know what to do to fix them. ... |>> click on the icon to control the sound and the icon is gone. ...
      (microsoft.public.windowsxp.general)
    • RE: Clients loosing connection to server
      ... It seems that it was the firewall on the client side that was causing the ... > Thanks for your response and I am glad that you think my information helps. ...
      (microsoft.public.windows.server.sbs)
    • Suspicious file on Desktop
      ... I can't figure out what's causing this - I don't use a mIRC script, ... don't have a firewall -- I do have Norton 2003 ... I'm using Windows XP Pro on Service Pack 1a, ... This list is provided by the SecurityFocus ARIS analyzer service. ...
      (Incidents)