Re: how to saturate 100Mbit

2003-12-13 Thread Eugene Grosbein
On Sat, Dec 13, 2003 at 01:06:19AM -0500, Clark Gaylord wrote:

> >Is it possible to saturate 100Mbit ethernet using FreeBSD 4.9-STABLE,
> >Pentium-133 & Intel 430VX-based motherboard (PCI-33),
> >Intel 82559 Pro/100 Ethernet (fxp) ? 
> >I tried to use sendfile(2) on /dev/zero but that does not work.
> >Then I created 8Tb holey file and used sendfile() on it.
> >That gave 100% CPU load and only 37Mbit/s on wire.
> I usually use ttcp for tcp throughput measurement.  You may not be able 
> to do 100Mbps, due to tcp-ness, but it has a udp mode as well.  Depends 
> on what you are interested in doing.  But ttcp is pretty low impact. 
> Also, when you use it, boost the buffersize; this can help performance 
> (and lower cpu hit) considerably.

Will ttcp or iperf use zero-copy mechanics like sendfile(2) or
they will make CPU load by copying from/to kernel space?

I made another attempt: set sendspace/recvspace for TCP/UDP to 65536,
mounted filesystem using NFS over UDP with -r 65536, -w 65536
and ran from NFS client:

dd if=holey-file of=/dev/null bs=10m

I've got about 30% of CPU load for the server (P-133) and less than
35mbit/s on wire.

Eugene Grosbein
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: how to saturate 100Mbit

2003-12-13 Thread DrumFire

>> dd if=holey-file of=/dev/null bs=10m
> 
> I've got about 30% of CPU load for the server (P-133) and less than
> 35mbit/s on wire.

Also you can try to dump traffic with tcpdump and send it with

/usr/ports/net/tcpreplay

I'm trying to send 100Mbit/s for 5-6 minutes with Ethernet frame size at
64 bytes, but I need very good hardware to make this.


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Fwd: 5.2-RC + ipfw

2003-12-13 Thread Nate Grey
Hello,

on 5.2-RC I get this error from ipfw:

 ipfw in free(): error: modified (chunk -) pointer
 Aboirt trap (core dumped)

examining my firewall script I noticed that error occurs when ipfw try to
load this rules

fwcmd="/sbin/ipfw -q/"
${fwcmd} add 310 set 1 deny ip from $bad_guys to any in recv ep0
${fwcmd} add 310 set 2 deny ip from any to $bad_guys out via ep0

badguys are:

bad_guys="(\
127.0.0.0/8 or \
192.168.0.1/16 or \
10.0.0.0/8 or \
172.16.0.0/12 or \
0.0.0.0/8 or \
169.254.0.0/16 or \
192.0.2.0/24 or \
224.0.0.0/4 \
)"

anyway, according to `ipfw sh` output the rules are loaded.

Bye Bye

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


RE: how to saturate 100Mbit

2003-12-13 Thread Don Bowman
From: DrumFire [mailto:[EMAIL PROTECTED]
> 
> >> dd if=holey-file of=/dev/null bs=10m
> > 
> > I've got about 30% of CPU load for the server (P-133) and less than
> > 35mbit/s on wire.
> 
> Also you can try to dump traffic with tcpdump and send it with
> 
> /usr/ports/net/tcpreplay
> 
> I'm trying to send 100Mbit/s for 5-6 minutes with Ethernet 
> frame size at
> 64 bytes, but I need very good hardware to make this.

There is a netgraph module called ng_source which can do this.
It can achieve about 400Kpps or >1Gbps on a xeon system with
a gigabit card, should be able to saturate a fxp.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: how to saturate 100Mbit

2003-12-13 Thread Luigi Rizzo
On Sat, Dec 13, 2003 at 10:50:33AM -0500, Don Bowman wrote:
...
> There is a netgraph module called ng_source which can do this.
> It can achieve about 400Kpps or >1Gbps on a xeon system with
> a gigabit card, should be able to saturate a fxp.

the fxp has a problem which does not allow it to go above 103/110/120kpps
depending on which descriptor model you use, no matter how fast
the CPU is.

Even not using any special kernel modules, a simple loop over
a sendto() on a udp socket can achieve around 500kpps on a 2.4GHz
box (em or bge). With some tricks and a sufficiently fast PCI
bus you can reach some 750kpps but then it really depends
on how fast is your PCI bus.

cheers
luigi

> [EMAIL PROTECTED] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Fwd: 5.2-RC + ipfw

2003-12-13 Thread Maxim Konovalov
[ CC: Luigi ]

On Sat, 13 Dec 2003, 11:49-, Nate Grey wrote:

> Hello,
>
> on 5.2-RC I get this error from ipfw:
>
>  ipfw in free(): error: modified (chunk -) pointer
>  Aboirt trap (core dumped)
>
> examining my firewall script I noticed that error occurs when ipfw try to
> load this rules
>
> fwcmd="/sbin/ipfw -q/"
> ${fwcmd} add 310 set 1 deny ip from $bad_guys to any in recv ep0
> ${fwcmd} add 310 set 2 deny ip from any to $bad_guys out via ep0
>
> badguys are:
>
> bad_guys="(\
> 127.0.0.0/8 or \
> 192.168.0.1/16 or \
> 10.0.0.0/8 or \
> 172.16.0.0/12 or \
> 0.0.0.0/8 or \
> 169.254.0.0/16 or \
> 192.0.2.0/24 or \
> 224.0.0.0/4 \
> )"
>
> anyway, according to `ipfw sh` output the rules are loaded.

Please try an enclosed patch or put a whitespace right after the '('
before '\'.

Index: ipfw2.c
===
RCS file: /home/ncvs/src/sbin/ipfw/ipfw2.c,v
retrieving revision 1.42
diff -u -r1.42 ipfw2.c
--- ipfw2.c 31 Oct 2003 18:31:55 -  1.42
+++ ipfw2.c 13 Dec 2003 18:42:18 -
@@ -2901,15 +2901,14 @@
goto done;

 #define OR_START(target)   \
-   if (ac && (*av[0] == '(' || *av[0] == '{')) {   \
+   if (ac && ( \
+   !strncmp(*av, "(", strlen(*av)) ||  \
+   !strncmp(*av, "{", strlen(*av)) )) {\
if (open_par)   \
errx(EX_USAGE, "nested \"(\" not allowed\n"); \
prev = NULL;\
open_par = 1;   \
-   if ( (av[0])[1] == '\0') {  \
-   ac--; av++; \
-   } else  \
-   (*av)++;\
+   ac--; av++; \
}   \
target: \

%%%

-- 
Maxim Konovalov, [EMAIL PROTECTED], [EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Auth + Sendmail help please

2003-12-13 Thread Julian Stacey
Hi freebsd-net@ folk.
I've been having problems trying to simultaneously configure my 4.9
home client gateway & my remote 24/7 server to provide an Auth +
SASL outgoing sendmail channel.  My fault not FreeBSD's but I'm
asking for help.  One problem is I dont have a known good server
or client to test the other half against. Another problem is too
many options - each end :-)

I'd much appreciate if some kind volunteer could either:
 A) Give me a temporary account for my sendmail client on their server
(not even a login, I've got plenty of those thanks, just a
`proper' SASL + Auth + Sendmail, (& it's easy to check I'm
not a spammer seeking a relay, hit Google with my name & you'll see
what I'm known for, better or worse :-)
or B)   I give you a temporary account on my half baked server,
you point your client at it, wait for it to blow, & tell
me what I've got wrong (Yes I can give you a full login so
you can look yourself if you want.)
Whichever, if either or both I'm offered please :-)

I've read lots of docs, not restricted to (but just listing some)
/usr/share/sendmail/cf/README
http://docs.snake.de/smtp-auth.html
http://home.leo.org/~barner/freebsd/articles/mailsetup/article.html
http://www.sendmail.org/~ca/email/cyrus/sysadmin.html
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/smtp-auth.html
& tried SASL2 & then SASL1,
Ive tried SASL passwords & direct /etc/passwd type.
I think I've tried most or all of
ports/security/ cyrus-sasl cyrus-sasl2 cyrus-sasl2-saslauthd
but I think not yet
mail/sendmail-sasl

My background .m4 files (both ends) are mastered from
 http://berklix.org/~jhs/src/bsd/fixes/FreeBSD/src/jhs/etc/sendmail/common.cpp

My current error report is server end: AUTH warning: no mechanisms
>From contrib/sendmail/src/srvrsmtp.c:3992
I have all of
 /usr/lib/sasl/Sendmail.conf -> ../../../site/usr/lib/sasl/Sendmail.conf
 /usr/local/lib/sasl/Sendmail.conf -> ../../../../site/usr/lib/sasl/Sendmail.conf
 /usr/local/lib/sasl2/Sendmail.conf -> ../../../../site/usr/lib/sasl/Sendmail.conf
Are symbolic links acceptable ?
Can Sendmail.conf contain comment lines beginning with hash char ?

Any help appreciated, please ! Thanks !

-
Julian Stacey.   Munich Unix C & Net Services Consultant.  http://berklix.com
  Mail in Ascii plain text;  HTML mail is dumped with Spam.
  Ihr Rauchen => mein allergischer Kopfschmerz !  Schnupftabak probieren.
  Software Patents ?  Vampires would approve ! http://berklix.com/jhs/patents
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: how to saturate 100Mbit

2003-12-13 Thread Eugene Grosbein
On Sat, Dec 13, 2003 at 10:17:06AM -0800, Luigi Rizzo wrote:

> the fxp has a problem which does not allow it to go above 103/110/120kpps
> depending on which descriptor model you use, no matter how fast
> the CPU is.

Can you explain the problem, please?

> Even not using any special kernel modules, a simple loop over
> a sendto() on a udp socket can achieve around 500kpps on a 2.4GHz
> box (em or bge). With some tricks and a sufficiently fast PCI
> bus you can reach some 750kpps but then it really depends
> on how fast is your PCI bus.

100*1024*1024/8/1500=8738.1(3)

It seems one does not need hundred of thousand pps to achive 100Mbps.

EUgene
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"