On 26/08/2019 20:15, Eugene Grosbein wrote:
26.08.2019 23:25, Victor Gamov wrote:

More general question about my current config.  I have about
200Mbit input multicasts which bridged and filtered later (about
380 Mbit bridged if trafshow does not lie me :-) )

Don't trust trafshow. Use: systat -ifstat 1

This!

systat show me more real picture: 750Mbit in, 650 Mbit out via bridge


Is it possible to get CPU load about 30% at this config after ipfw
optimization?  Or may be main bottleneck is not ipfw-specific?

You won't know until you try and nobody can tell. Too many
variables. And you better compare it with 11.3 because 12.0 may have
some unsolved preformance regressions.

I see.  I will try 11.3 later.

Now after output optimization as Eugene recommended one core load decreased from 88 to 77 percents. But many loads decreased when unused rules removed.

Now I'll try to optimize input rules too like
=====
table All_Ifaces create type iface
table All_Ifaces add vlan10 20010
table All_Ifaces add vlan20 20020
table All_Ifaces add vlan30 20030

12000 skipto tablearg ip from any to any in recv table(All_Ifaces)

20010 allow udp from src1 to mcast1 in recv via vlan10
20011 deny ip from any to any

20020 allow udp from src2 to mcast2 in recv via vlan20
20021 deny ip from any to any
=====


--
CU,
Victor Gamov
_______________________________________________
freebsd-net@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Reply via email to