Hello, i replaced the MP kernel with the SP one and made some tests. Perfomances are better, all cpu goes to the kernel and user processes. But it is slow. I will ask to change the hardware, as it is old.
jy boisiaud Le mer. 22 juil. 2020 à 08:36, jean-yves boisiaud < jean-yves.boisi...@alcor-consulting.fr> a écrit : > ok, i'll try with the bsd.sp kernel. > > thank you for your help. > > :-( > > > Le dim. 19 juil. 2020 à 07:41, Chris Cappuccio <ch...@nmedia.net> a > écrit : > >> jean-yves boisiaud [jean-yves.boisi...@alcor-consulting.fr] wrote: >> > Last week, I upgraded a couple of firewalls using carp/pfsync and >> sasyncd >> > from 6.0 to 6.7 (yes, big jump !). >> > >> > I also applied all the 6.7 published patches. >> > >> > When some heavy traffic takes one of the IPSec tunnel, I noticed that : >> > - all network connections are slowed down >> > - unused network bandwidth increase instead of decrease >> > - idle CPU move towards 0, and spinning increase to take about 50% of >> the >> > CPU >> > >> > When I stop the IPSec traffic : >> > - network connections increase immediatly >> > - unused network bandwidth cecreases immediately >> > - spinning CPU is low. >> > >> >> This is basically a performance regression that could be due to the MP >> work. You are seemingly running into contention that wasn't possible >> before. >> The question is, where is this happening? I don't know if the dynamic >> tracer >> can help here. >> > > > -- > Jean-Yves Boisiaud - Alcor Consulting > 49, rue du Chemin Vert > 49300 Cholet > mobile : +33 6 63 71 73 46 >
