Le Tue, 22 Feb 2011 19:13:48 +0100, Manuel Guesdon <ml+openbsd.m...@oxymium.net> a icrit :
Hello, > We've got same problems (on a routeur, not a firewall). Increasing > MAX_INTS_PER_SEC to 24000 increased bandwith and lowered packet loss. > Our cards are "Intel PRO/1000 (82576)" and "Intel PRO/1000 FP > (82576)". Did you try to increase the number of descriptor? #define EM_MAX_TXD 256 #define EM_MAX_RXD 256 I've tried up to 2048 (and with MAX_INTS_PER_SEC = 16000) but it looks worth. My configuration is two firewalls in master/backup mode. On the first one the two most busy links are on the first card (Fiber). On the second, these two links are not on the same card, one is on the fiber card and the other on the cupper card. I've noticed today that the input "Ierr" rate is far lower on the second firewall than on the first. Is it possible to have a bottleneck on the ethernet card or on the bus? I will make more tests tomorrow... Thanks, regards.