> From: "Daniel Melameth" <dan...@melameth.com> > Subject: Re: pf/queue questions > > On Tue, Sep 23, 2014 at 9:39 AM, Dewey Hylton <dewey.hyl...@gmail.com> wrote: > > i have a site-to-site vpn setup across a 40Mbps wan link (average ~30ms > > latency). one of its uses is for san replication, but of course management > > traffic (ssh sessions, etc.) have to cross the link as well. without using > > queues, at times the replication traffic is such that management traffic > > suffers to the point of being unusable. > > > > so i setup queues, which "fixed" the management problem. but despite the > > management bandwidth requirements being minimal, the san replication > > traffic was then seen to plateau well below where i believe it should have > > been. > > > > one specific thing i'm seeing with this particular configuration is that > > san replication traffic tops out at 24Mbps, as seen on the wan circuit > > itself (outside of openbsd). removing the queues results in 100% wan > > utilization, even up to 100Mbps when the circuit is temporarily > > reconfigured to allow it. > > It's not clear to me in which direction or on what interface the SAN > traffic is, but your 20Mb queue on $INETIF might be limiting your > maximum throughput. That said, you might also want to consider > configuring qlimit and you can tweak this based on QLEN in systat > queues. Lastly, I recall henning@ saying queuing on VLANs is mostly > useless, so you only want to apply altq to physical interfaces.
daniel, thanks for your input. after going back and reading henning's comments regarding queuing on vlans, i moved the queue definition to the physical interface and things are now working as expected.
