ok, i'll try with the bsd.sp kernel. thank you for your help.
:-( Le dim. 19 juil. 2020 à 07:41, Chris Cappuccio <ch...@nmedia.net> a écrit : > jean-yves boisiaud [jean-yves.boisi...@alcor-consulting.fr] wrote: > > Last week, I upgraded a couple of firewalls using carp/pfsync and sasyncd > > from 6.0 to 6.7 (yes, big jump !). > > > > I also applied all the 6.7 published patches. > > > > When some heavy traffic takes one of the IPSec tunnel, I noticed that : > > - all network connections are slowed down > > - unused network bandwidth increase instead of decrease > > - idle CPU move towards 0, and spinning increase to take about 50% of the > > CPU > > > > When I stop the IPSec traffic : > > - network connections increase immediatly > > - unused network bandwidth cecreases immediately > > - spinning CPU is low. > > > > This is basically a performance regression that could be due to the MP > work. You are seemingly running into contention that wasn't possible > before. > The question is, where is this happening? I don't know if the dynamic > tracer > can help here. > -- Jean-Yves Boisiaud - Alcor Consulting 49, rue du Chemin Vert 49300 Cholet mobile : +33 6 63 71 73 46
