jean-yves boisiaud [jean-yves.boisi...@alcor-consulting.fr] wrote: > Last week, I upgraded a couple of firewalls using carp/pfsync and sasyncd > from 6.0 to 6.7 (yes, big jump !). > > I also applied all the 6.7 published patches. > > When some heavy traffic takes one of the IPSec tunnel, I noticed that : > - all network connections are slowed down > - unused network bandwidth increase instead of decrease > - idle CPU move towards 0, and spinning increase to take about 50% of the > CPU > > When I stop the IPSec traffic : > - network connections increase immediatly > - unused network bandwidth cecreases immediately > - spinning CPU is low. >
This is basically a performance regression that could be due to the MP work. You are seemingly running into contention that wasn't possible before. The question is, where is this happening? I don't know if the dynamic tracer can help here.
