APU4b4: Die MTU ist schuld! Schon wieder... diesmal aber anders rum.

Ich hab das mit dem routing, jetzt mal nachgemessen iperf3:
Code:
Connecting to host 172.16.70.5, port 5201
[  4] local 172.16.70.6 port 53111 connected to 172.16.70.5 port 5201
[ ID] Interval           Transfer     Bandwidth
[  4]   0.00-1.00   sec  91.2 MBytes   765 Mbits/sec
[  4]   1.00-2.00   sec   112 MBytes   941 Mbits/sec
[  4]   2.00-3.00   sec   112 MBytes   941 Mbits/sec
[  4]   3.00-4.00   sec   112 MBytes   940 Mbits/sec
[  4]   4.00-5.00   sec   112 MBytes   940 Mbits/sec
[  4]   5.00-6.00   sec   112 MBytes   940 Mbits/sec
[  4]   6.00-7.00   sec   112 MBytes   940 Mbits/sec
[  4]   7.00-8.00   sec   112 MBytes   940 Mbits/sec
[  4]   8.00-9.00   sec   112 MBytes   940 Mbits/sec
[  4]   9.00-10.00  sec   112 MBytes   940 Mbits/sec
[  4]  10.00-11.00  sec   112 MBytes   940 Mbits/sec
[  4]  11.00-12.00  sec   112 MBytes   940 Mbits/sec
[  4]  12.00-13.00  sec   112 MBytes   940 Mbits/sec
[  4]  13.00-14.00  sec   112 MBytes   940 Mbits/sec
[  4]  14.00-15.00  sec   112 MBytes   940 Mbits/sec
[  4]  15.00-16.00  sec   112 MBytes   940 Mbits/sec
[  4]  16.00-17.00  sec   112 MBytes   940 Mbits/sec
[  4]  17.00-18.00  sec   112 MBytes   940 Mbits/sec
[  4]  18.00-19.00  sec   112 MBytes   940 Mbits/sec
[  4]  19.00-20.00  sec   112 MBytes   940 Mbits/sec
[  4]  20.00-21.00  sec   112 MBytes   940 Mbits/sec
[  4]  21.00-22.00  sec   112 MBytes   940 Mbits/sec
[  4]  22.00-23.00  sec   112 MBytes   940 Mbits/sec
[  4]  23.00-24.00  sec   112 MBytes   940 Mbits/sec
[  4]  24.00-25.00  sec   112 MBytes   940 Mbits/sec
[  4]  25.00-26.00  sec   112 MBytes   940 Mbits/sec
[  4]  26.00-27.00  sec   112 MBytes   940 Mbits/sec
[  4]  27.00-28.00  sec   112 MBytes   940 Mbits/sec
[  4]  28.00-29.00  sec   112 MBytes   940 Mbits/sec
[  4]  29.00-30.00  sec   112 MBytes   940 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  4]   0.00-30.00  sec  3.26 GBytes   934 Mbits/sec                  sender
[  4]   0.00-30.00  sec  3.26 GBytes   934 Mbits/sec                  receiver

iperf Done.

Code:
Connecting to host 172.16.80.10, port 5201
[  4] local 172.16.70.10 port 53344 connected to 172.16.80.10 port 5201
[ ID] Interval           Transfer     Bandwidth
[  4]   0.00-1.00   sec  51.7 MBytes   433 Mbits/sec
[  4]   1.00-2.00   sec  44.8 MBytes   377 Mbits/sec
[  4]   2.00-3.00   sec  52.8 MBytes   443 Mbits/sec
[  4]   3.00-4.00   sec  52.9 MBytes   444 Mbits/sec
[  4]   4.00-5.00   sec  51.4 MBytes   431 Mbits/sec
[  4]   5.00-6.00   sec  52.8 MBytes   443 Mbits/sec
[  4]   6.00-7.00   sec  53.7 MBytes   451 Mbits/sec
[  4]   7.00-8.00   sec  53.8 MBytes   451 Mbits/sec
[  4]   8.00-9.00   sec  54.2 MBytes   455 Mbits/sec
[  4]   9.00-10.00  sec  53.7 MBytes   450 Mbits/sec
[  4]  10.00-11.00  sec  53.8 MBytes   452 Mbits/sec
[  4]  11.00-12.00  sec  49.3 MBytes   413 Mbits/sec
[  4]  12.00-13.00  sec  53.6 MBytes   450 Mbits/sec
[  4]  13.00-14.00  sec  53.8 MBytes   451 Mbits/sec
[  4]  14.00-15.00  sec  53.9 MBytes   452 Mbits/sec
[  4]  15.00-16.00  sec  53.5 MBytes   449 Mbits/sec
[  4]  16.00-17.00  sec  53.3 MBytes   447 Mbits/sec
[  4]  17.00-18.00  sec  52.5 MBytes   441 Mbits/sec
[  4]  18.00-19.00  sec  52.5 MBytes   441 Mbits/sec
[  4]  19.00-20.00  sec  52.4 MBytes   440 Mbits/sec
[  4]  20.00-21.00  sec  52.3 MBytes   439 Mbits/sec
[  4]  21.00-22.00  sec  48.1 MBytes   404 Mbits/sec
[  4]  22.00-23.00  sec  50.9 MBytes   427 Mbits/sec
[  4]  23.00-24.00  sec  53.1 MBytes   446 Mbits/sec
[  4]  24.00-25.00  sec  52.3 MBytes   438 Mbits/sec
[  4]  25.00-26.00  sec  52.0 MBytes   437 Mbits/sec
[  4]  26.00-27.00  sec  52.2 MBytes   438 Mbits/sec
[  4]  27.00-28.00  sec  51.8 MBytes   435 Mbits/sec
[  4]  28.00-29.00  sec  52.2 MBytes   437 Mbits/sec
[  4]  29.00-30.00  sec  51.5 MBytes   433 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  4]   0.00-30.00  sec  1.53 GBytes   438 Mbits/sec                  sender
[  4]   0.00-30.00  sec  1.53 GBytes   438 Mbits/sec                  receiver

iperf Done.

Code:
Connecting to host 172.16.80.10, port 5201
[  4] local 172.16.70.10 port 53346 connected to 172.16.80.10 port 5201
[ ID] Interval           Transfer     Bandwidth
[  4]   0.00-1.00   sec   112 MBytes   937 Mbits/sec
[  4]   1.00-2.00   sec   112 MBytes   941 Mbits/sec
[  4]   2.00-3.00   sec   112 MBytes   941 Mbits/sec
[  4]   3.00-4.00   sec   112 MBytes   939 Mbits/sec
[  4]   4.00-5.00   sec   112 MBytes   940 Mbits/sec
[  4]   5.00-6.00   sec   112 MBytes   939 Mbits/sec
[  4]   6.00-7.00   sec   112 MBytes   936 Mbits/sec
[  4]   7.00-8.00   sec  80.5 MBytes   675 Mbits/sec
[  4]   8.00-9.00   sec   112 MBytes   942 Mbits/sec
[  4]   9.00-10.00  sec   112 MBytes   940 Mbits/sec
[  4]  10.00-11.00  sec   112 MBytes   939 Mbits/sec
[  4]  11.00-12.00  sec   112 MBytes   937 Mbits/sec
[  4]  12.00-13.00  sec   112 MBytes   942 Mbits/sec
[  4]  13.00-14.00  sec   112 MBytes   940 Mbits/sec
[  4]  14.00-15.00  sec   112 MBytes   939 Mbits/sec
[  4]  15.00-16.00  sec   112 MBytes   941 Mbits/sec
[  4]  16.00-17.00  sec   112 MBytes   938 Mbits/sec
[  4]  17.00-18.00  sec   112 MBytes   942 Mbits/sec
[  4]  18.00-19.00  sec   112 MBytes   938 Mbits/sec
[  4]  19.00-20.00  sec   112 MBytes   940 Mbits/sec
[  4]  20.00-21.00  sec   112 MBytes   941 Mbits/sec
[  4]  21.00-22.00  sec   112 MBytes   940 Mbits/sec
[  4]  22.00-23.00  sec   112 MBytes   939 Mbits/sec
[  4]  23.00-24.00  sec   100 MBytes   842 Mbits/sec
[  4]  24.00-25.00  sec   112 MBytes   940 Mbits/sec
[  4]  25.00-26.00  sec   112 MBytes   941 Mbits/sec
[  4]  26.00-27.00  sec   112 MBytes   938 Mbits/sec
[  4]  27.00-28.00  sec   112 MBytes   941 Mbits/sec
[  4]  28.00-29.00  sec   112 MBytes   937 Mbits/sec
[  4]  29.00-30.00  sec   112 MBytes   941 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  4]   0.00-30.00  sec  3.24 GBytes   928 Mbits/sec                  sender
[  4]   0.00-30.00  sec  3.24 GBytes   928 Mbits/sec                  receiver

iperf Done.

Also meine Aussage die "APU4b4 sei als OpenBSD Router nur bedingt geeignet" muss ich wohl zumindest teilweise revidieren. pf schluckt in seiner Standardeinstellung offenbar ne ganze Menge.
Und Prozessormessungen hab ich noch nicht gemacht.
 
Zuletzt bearbeitet:
Ich hab das mit dem routing, jetzt mal nachgemessen iperf3:
Code:
Connecting to host 172.16.70.5, port 5201
[  4] local 172.16.70.6 port 53111 connected to 172.16.70.5 port 5201
[ ID] Interval           Transfer     Bandwidth
[  4]   0.00-1.00   sec  91.2 MBytes   765 Mbits/sec
[  4]   1.00-2.00   sec   112 MBytes   941 Mbits/sec
[  4]   2.00-3.00   sec   112 MBytes   941 Mbits/sec
[  4]   3.00-4.00   sec   112 MBytes   940 Mbits/sec
[  4]   4.00-5.00   sec   112 MBytes   940 Mbits/sec
[  4]   5.00-6.00   sec   112 MBytes   940 Mbits/sec
[  4]   6.00-7.00   sec   112 MBytes   940 Mbits/sec
[  4]   7.00-8.00   sec   112 MBytes   940 Mbits/sec
[  4]   8.00-9.00   sec   112 MBytes   940 Mbits/sec
[  4]   9.00-10.00  sec   112 MBytes   940 Mbits/sec
[  4]  10.00-11.00  sec   112 MBytes   940 Mbits/sec
[  4]  11.00-12.00  sec   112 MBytes   940 Mbits/sec
[  4]  12.00-13.00  sec   112 MBytes   940 Mbits/sec
[  4]  13.00-14.00  sec   112 MBytes   940 Mbits/sec
[  4]  14.00-15.00  sec   112 MBytes   940 Mbits/sec
[  4]  15.00-16.00  sec   112 MBytes   940 Mbits/sec
[  4]  16.00-17.00  sec   112 MBytes   940 Mbits/sec
[  4]  17.00-18.00  sec   112 MBytes   940 Mbits/sec
[  4]  18.00-19.00  sec   112 MBytes   940 Mbits/sec
[  4]  19.00-20.00  sec   112 MBytes   940 Mbits/sec
[  4]  20.00-21.00  sec   112 MBytes   940 Mbits/sec
[  4]  21.00-22.00  sec   112 MBytes   940 Mbits/sec
[  4]  22.00-23.00  sec   112 MBytes   940 Mbits/sec
[  4]  23.00-24.00  sec   112 MBytes   940 Mbits/sec
[  4]  24.00-25.00  sec   112 MBytes   940 Mbits/sec
[  4]  25.00-26.00  sec   112 MBytes   940 Mbits/sec
[  4]  26.00-27.00  sec   112 MBytes   940 Mbits/sec
[  4]  27.00-28.00  sec   112 MBytes   940 Mbits/sec
[  4]  28.00-29.00  sec   112 MBytes   940 Mbits/sec
[  4]  29.00-30.00  sec   112 MBytes   940 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  4]   0.00-30.00  sec  3.26 GBytes   934 Mbits/sec                  sender
[  4]   0.00-30.00  sec  3.26 GBytes   934 Mbits/sec                  receiver

iperf Done.

Code:
Connecting to host 172.16.80.10, port 5201
[  4] local 172.16.70.10 port 53344 connected to 172.16.80.10 port 5201
[ ID] Interval           Transfer     Bandwidth
[  4]   0.00-1.00   sec  51.7 MBytes   433 Mbits/sec
[  4]   1.00-2.00   sec  44.8 MBytes   377 Mbits/sec
[  4]   2.00-3.00   sec  52.8 MBytes   443 Mbits/sec
[  4]   3.00-4.00   sec  52.9 MBytes   444 Mbits/sec
[  4]   4.00-5.00   sec  51.4 MBytes   431 Mbits/sec
[  4]   5.00-6.00   sec  52.8 MBytes   443 Mbits/sec
[  4]   6.00-7.00   sec  53.7 MBytes   451 Mbits/sec
[  4]   7.00-8.00   sec  53.8 MBytes   451 Mbits/sec
[  4]   8.00-9.00   sec  54.2 MBytes   455 Mbits/sec
[  4]   9.00-10.00  sec  53.7 MBytes   450 Mbits/sec
[  4]  10.00-11.00  sec  53.8 MBytes   452 Mbits/sec
[  4]  11.00-12.00  sec  49.3 MBytes   413 Mbits/sec
[  4]  12.00-13.00  sec  53.6 MBytes   450 Mbits/sec
[  4]  13.00-14.00  sec  53.8 MBytes   451 Mbits/sec
[  4]  14.00-15.00  sec  53.9 MBytes   452 Mbits/sec
[  4]  15.00-16.00  sec  53.5 MBytes   449 Mbits/sec
[  4]  16.00-17.00  sec  53.3 MBytes   447 Mbits/sec
[  4]  17.00-18.00  sec  52.5 MBytes   441 Mbits/sec
[  4]  18.00-19.00  sec  52.5 MBytes   441 Mbits/sec
[  4]  19.00-20.00  sec  52.4 MBytes   440 Mbits/sec
[  4]  20.00-21.00  sec  52.3 MBytes   439 Mbits/sec
[  4]  21.00-22.00  sec  48.1 MBytes   404 Mbits/sec
[  4]  22.00-23.00  sec  50.9 MBytes   427 Mbits/sec
[  4]  23.00-24.00  sec  53.1 MBytes   446 Mbits/sec
[  4]  24.00-25.00  sec  52.3 MBytes   438 Mbits/sec
[  4]  25.00-26.00  sec  52.0 MBytes   437 Mbits/sec
[  4]  26.00-27.00  sec  52.2 MBytes   438 Mbits/sec
[  4]  27.00-28.00  sec  51.8 MBytes   435 Mbits/sec
[  4]  28.00-29.00  sec  52.2 MBytes   437 Mbits/sec
[  4]  29.00-30.00  sec  51.5 MBytes   433 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  4]   0.00-30.00  sec  1.53 GBytes   438 Mbits/sec                  sender
[  4]   0.00-30.00  sec  1.53 GBytes   438 Mbits/sec                  receiver

iperf Done.

Code:
Connecting to host 172.16.80.10, port 5201
[  4] local 172.16.70.10 port 53346 connected to 172.16.80.10 port 5201
[ ID] Interval           Transfer     Bandwidth
[  4]   0.00-1.00   sec   112 MBytes   937 Mbits/sec
[  4]   1.00-2.00   sec   112 MBytes   941 Mbits/sec
[  4]   2.00-3.00   sec   112 MBytes   941 Mbits/sec
[  4]   3.00-4.00   sec   112 MBytes   939 Mbits/sec
[  4]   4.00-5.00   sec   112 MBytes   940 Mbits/sec
[  4]   5.00-6.00   sec   112 MBytes   939 Mbits/sec
[  4]   6.00-7.00   sec   112 MBytes   936 Mbits/sec
[  4]   7.00-8.00   sec  80.5 MBytes   675 Mbits/sec
[  4]   8.00-9.00   sec   112 MBytes   942 Mbits/sec
[  4]   9.00-10.00  sec   112 MBytes   940 Mbits/sec
[  4]  10.00-11.00  sec   112 MBytes   939 Mbits/sec
[  4]  11.00-12.00  sec   112 MBytes   937 Mbits/sec
[  4]  12.00-13.00  sec   112 MBytes   942 Mbits/sec
[  4]  13.00-14.00  sec   112 MBytes   940 Mbits/sec
[  4]  14.00-15.00  sec   112 MBytes   939 Mbits/sec
[  4]  15.00-16.00  sec   112 MBytes   941 Mbits/sec
[  4]  16.00-17.00  sec   112 MBytes   938 Mbits/sec
[  4]  17.00-18.00  sec   112 MBytes   942 Mbits/sec
[  4]  18.00-19.00  sec   112 MBytes   938 Mbits/sec
[  4]  19.00-20.00  sec   112 MBytes   940 Mbits/sec
[  4]  20.00-21.00  sec   112 MBytes   941 Mbits/sec
[  4]  21.00-22.00  sec   112 MBytes   940 Mbits/sec
[  4]  22.00-23.00  sec   112 MBytes   939 Mbits/sec
[  4]  23.00-24.00  sec   100 MBytes   842 Mbits/sec
[  4]  24.00-25.00  sec   112 MBytes   940 Mbits/sec
[  4]  25.00-26.00  sec   112 MBytes   941 Mbits/sec
[  4]  26.00-27.00  sec   112 MBytes   938 Mbits/sec
[  4]  27.00-28.00  sec   112 MBytes   941 Mbits/sec
[  4]  28.00-29.00  sec   112 MBytes   937 Mbits/sec
[  4]  29.00-30.00  sec   112 MBytes   941 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  4]   0.00-30.00  sec  3.24 GBytes   928 Mbits/sec                  sender
[  4]   0.00-30.00  sec  3.24 GBytes   928 Mbits/sec                  receiver

iperf Done.

Also meine Aussage die "APU4b4 sei als OpenBSD Router nur bedingt geeignet" muss ich wohl zumindest teilweise revidieren. pf schluckt in seiner Standardeinstellung offenbar ne ganze Menge.
Und Prozessormessungen hab ich noch nicht gemacht.

Hab die Messungen auf bsd.network gesehen. Der default ist ja ausschließlich pass, daher wundert mich das etwas, dass der Durchsatz halbiert wird.
 
man mal bitte ein sysctl -a | ifq

ist der wert drop > = 0 dann muss dort den buffer erhoehen

was sagt pfctl -si ,insbesondere auf congestion achten.

holger
 
man mal bitte ein sysctl -a | ifq

ist der wert drop > = 0 dann muss dort den buffer erhoehen

was sagt pfctl -si ,insbesondere auf congestion achten.

Also sysctl -a | grep ifq sagt:
Code:
net.inet.ip.ifq.len=0
net.inet.ip.ifq.maxlen=2048
net.inet.ip.ifq.drops=0
net.inet6.ip6.ifq.len=0
net.inet6.ip6.ifq.maxlen=2048
net.inet6.ip6.ifq.drops=0

Ich nehme mal an, das du mit "buffer" die net.inet.ip.ifq.maxlen meinst?

und pfctl -si muss ich wohl während oder direkt nach solcher tests ausführen... die Werte darin geben gerade nicht all zu viel her.
 
Zuletzt bearbeitet:
hi

ne pfctl si ist fortlaufen , du musst die werte flushen um auf 0 zu kommen


wenn congestion somit != 0 ist hat / hatte das system ein performance problem während der
verarbeitung des packets via pf

und ja bei ifq mein é ich den buffer wert zu erhöhen falls es drops gibt.

holger
 
Ich hatte gestern mal noch kurz Zeit und habe das hier gemessen: [NAS] == [APU2] == [NUC]. Iperf3 als Beispiel (60 Sekunden):
Code:
[  5]   1.00-2.00   sec  73.0 MBytes   612 Mbits/sec
[  5]   2.00-3.00   sec  69.3 MBytes   581 Mbits/sec
[  5]   3.00-4.00   sec  70.6 MBytes   592 Mbits/sec
[  5]   4.00-5.00   sec  68.9 MBytes   578 Mbits/sec
[  5]   5.00-6.00   sec  71.2 MBytes   598 Mbits/sec
[  5]   6.00-7.00   sec  69.4 MBytes   582 Mbits/sec
[  5]   7.00-8.00   sec  70.1 MBytes   588 Mbits/sec
[  5]   8.00-9.00   sec  69.3 MBytes   581 Mbits/sec
[  5]   9.00-10.00  sec  71.3 MBytes   598 Mbits/sec
[  5]  10.00-11.00  sec  69.7 MBytes   584 Mbits/sec
...
...
...
[  5]  51.00-52.00  sec  73.6 MBytes   618 Mbits/sec
[  5]  52.00-53.00  sec  72.2 MBytes   606 Mbits/sec
[  5]  53.00-54.00  sec  73.1 MBytes   613 Mbits/sec
[  5]  54.00-55.00  sec  72.7 MBytes   610 Mbits/sec
[  5]  55.00-56.00  sec  75.7 MBytes   635 Mbits/sec
[  5]  56.00-57.00  sec  72.9 MBytes   612 Mbits/sec
[  5]  57.00-58.00  sec  74.7 MBytes   626 Mbits/sec
[  5]  58.00-59.00  sec  74.3 MBytes   623 Mbits/sec
[  5]  59.00-60.00  sec  74.7 MBytes   627 Mbits/sec
CPU Auslastung:
Code:
  1  [||||||||||||||||||||||                                           30.4%]   Tasks: 16, 0 thr; 2 running
  2  [|||||||||||||||||||||||||||||||||||||||||                        56.0%]   Load average: 2.78 1.14 0.60
  3  [|||||||||||||||||||||||||||                                      36.6%]   Uptime: 7 days, 00:06:54
  4  [|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||99.0%]
  Mem[||||||||||||||||||||||||||||||||||||||||||||||              667M/3.95G]
  Swp[                                                              0K/2.00G]
Ich halte diese Werte für realistisch, da ich z.B. auch von Steam Downloads mit einem Speed von fast 60 MB/s [WAN Interface] fahren kann.

Jep! Kann ich bestätigen. Habe meine Aufzeichnungen der damaligen Tests gefunden und sieht sehr ähnlich aus.
 
@roema : OPNSense und pfSense stehen bei mir auch noch auf dem testplan Plan. Aber erst nachdem ich pf beherrsche
Ich nehme an, dass Dir das bewusst ist, aber hier noch einmal der Hinweis: PF auf FreeBSD (und damit auch pfSense, HardenedBSD bzw. OPNSense) ist ungefähr bei Version 4.5 stehen geblieben. Es gab ein paar Fixes/Weiterentwicklungen, aber gerade die Syntax-Änderungen, die in OpenBSD stattgefunden haben, hat FreeBSD nicht mehr mitgemacht. Daher sind die heutigen Anleitungen von/für OpenBSD nur mit Vorsicht auch für FreeBSD gültig.

Wer die PF-FAQs in Version 4.5 lesen will, kann sich diese per CVS ziehen (Tipp von https://srobb.net/pf.html):
Code:
cvs -d anoncvs@anoncvs1.ca.openbsd.org:/cvs get -D "May 2, 2009" www/faq/pf
 
Zurück
Oben