Hi all,
I'm not a tcp/ip guru, so I don't known if it's a bug or not.
The situation is little complexe, so I'm going to explain that.
I've one server with tree interfaces two bce and one bge. All test is on
two bce.
This server running FreeBSD-7.2-p6 and have lot of jail (but the problem is
the same for one jail, so I assume I've just one jail). The bce0 and bce1
are in different vlan.
The jail is on bce1 (meaning the jail IP is on the bce1 subnet).
The default gateway is on bce0
So to make all traffic of the jail pass only throught bce1 and not using
bce0 I'm using pf with something like
pass out route-to (bce1 bce1_subnet_gw) from jail_IP to ! bce1_subnet
keep state
pass in on bce1 reply-to (bce1 bce1_subnet_gw) from ! bce1_subnet to
jail_IP keep state
if I do that all traffic pass through the right interface (bce1), but...the
bandwith drop to ~60kb/s (on gigabit interface).
So I find the problem is with TSO, if I deactivated the TSO the bandwith is
return to normal.
I don't knwon if it's a bug in PF (the problem is same if I use scrub or
not) or in the TSO support of bce.
I can run some few tests if someone like to debug, but because the server
is in production I cannot make lot of test.
Regards.
JAS
--
Albert SHIH
SIO batiment 15
Observatoire de Paris Meudon
5 Place Jules Janssen
92195 Meudon Cedex
Téléphone : 01 45 07 76 26/06 86 69 95 71
Heure local/Local time:
Lun 15 fév 2010 22:10:52 CET
_______________________________________________
freebsd-pf@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "freebsd-pf-unsubscr...@freebsd.org"
