On 2/3/06, Chris Zakelj <[EMAIL PROTECTED]> wrote: > Has anyone ever actually pushed a Soekris all out to see when it begins > to choke? If so, where did it/they top out? It's great to remind us > yanks that our residential broadband sucks compared to EUR and asia, but > as you say, we'll catch up eventually.
I wish I knew actual numbers, but I know that I had two net4801's as endpoints of an IPsec tunnel, each on 1.5 Mbit/s lines running OpenBSD 3.5 or 3.6. Someone started pushing a big file across the line, and suddenly one of the routers dropped off the internet because it had no CPU left after trying to handle all the encrypting and decrypting. Again, I don't know how much traffic that really amounted to -- however fast two boxes can go across good 1.5 Mbit lines and 40 miles of southern California. Turning on altq and capping the bandwidth available to that tunnel fixed the problem (though it made some users unhappy when they couldn't transfer their files as quickly). All that being said, we 1) didn't have an encryption accelerator in the box and 2) didn't really spend any time doing performance tuning on it, so someone who worked at it could probably get more out of it. -Josh Tolley
