Re: Question about numbers of connections

2009-05-16 Thread David Figuera
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Espartano wrote:
> Ok, I think that I didn't explain it very well, I don´t have any hight
> speed network, I only have used my Alix board at my house, but I
> wondering how much work the Alix board could support, more
> specifically I wonder if the Alix board could manage about 1 thousand
> concurrent connections through a 100Mbps network making round-robin to
> load balance and spread the connections between 3 or 4 servers, I
> think that the Alix board could do it, It is only  a hypothetical case
> but I would like to know if I can trust on my Alix board to do this
> kind of job or not.

If you're thinking about buying an ALIX and you are not sure if it's going
to do the trick, well, I'm not very sure, but I think it will work just fine.

I have an ALIX 2C3 (Geode LX800 @500MHz) and would make some tests.


PS: Are you subscribed to freebsd-es list as well? I think I've seen you there.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkoPIKcACgkQsGqVGJtK6HqbtQCgjIYCX8azYviyRTvRNYrObEyY
8lcAnif76j55+5GTtwzVRcc7n/UjhODe
=WB//
-END PGP SIGNATURE-
___
freebsd-pf@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "freebsd-pf-unsubscr...@freebsd.org"


altq

2009-05-16 Thread irix
Hello Freebsd-pf,

  Sorry for my english.

OpenBSD team is abandon the altq project.
Maybe FreeBSD team does not come as OpenBSD team.

In Kernel is present  "options ALTQ_CDNR   # Traffic conditioner",
that  is  may  be  used  for  simple  ingress  traffic  shaping  (like
dummynet).  Maybe  you  may add this function to pfctl to make use it.
Maybe after this OpenBSD team is backport this function to base.

Also   lacking  in  pf/altq  dynamic  queues  like  in  dummynet  with
dst-masks   (src-masks)(ipfw  pipe 10 config mask dst-ip 0x00ff bw
1024bit/s  queue; ipfw add pipe 10 tcp from any to 1.1.1.0/24 via fxp0),
when  with  one  rule may create many dynamic queues for per ip shaping from 
subnet.

 This  maybe  useful  for  many  people,  because  pf  is most popular
 firewall.

 Thank you.

-- 
Best regards,
 irix  mailto:i...@ukr.net

___
freebsd-pf@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "freebsd-pf-unsubscr...@freebsd.org"


Re: Question about numbers of connections

2009-05-16 Thread Espartano
On Sat, May 16, 2009 at 3:23 PM, David Figuera  wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> Espartano wrote:
>> Ok, I think that I didn't explain it very well, I don´t have any hight
>> speed network, I only have used my Alix board at my house, but I
>> wondering how much work the Alix board could support, more
>> specifically I wonder if the Alix board could manage about 1 thousand
>> concurrent connections through a 100Mbps network making round-robin to
>> load balance and spread the connections between 3 or 4 servers, I
>> think that the Alix board could do it, It is only  a hypothetical case
>> but I would like to know if I can trust on my Alix board to do this
>> kind of job or not.
>
> If you're thinking about buying an ALIX and you are not sure if it's going
> to do the trick, well, I'm not very sure, but I think it will work just fine.
>
> I have an ALIX 2C3 (Geode LX800 @500MHz) and would make some tests.
>
>
> PS: Are you subscribed to freebsd-es list as well? I think I've seen you 
> there.

Yes, Already I'm subscriber to freebsd-es list too :)


-- 
"Linux is for people who hate Windows, BSD is for people who love UNIX".

"Documentation is like sex: when it is good, it is very, very good;
and when it is bad, it is better than nothing."
___
freebsd-pf@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "freebsd-pf-unsubscr...@freebsd.org"


Re: Question about numbers of connections

2009-05-16 Thread Yuriy Grishin

Espartano wrote:

On Wed, May 13, 2009 at 8:16 PM, Jon Radel  wrote:
  

Sam Wun wrote:


Alix is for home user.

  

Which is just about as useful as the OP asking if the machine can handle "a
lot of traffic without troubles" without giving us any hint whether he means
traffic that keeps a 128 kbps DSL line semi-busy or if he has a 100 mbps
fiber to his house that's practically melting from all the traffic.  :-)

That said, I'll report that for years I used a "consumer class" Celeron
machine with 384 MB of RAM to act as a firewall for some web sites with a T1
(1.5 mbps) of traffic hitting it at times, and had no known issues.  I've
upgraded a bit by now but mainly just because rather than to solve any
particular issue.




Ok, I think that I didn't explain it very well, I don´t have any hight
speed network, I only have used my Alix board at my house, but I
wondering how much work the Alix board could support, more
specifically I wonder if the Alix board could manage about 1 thousand
concurrent connections through a 100Mbps network making round-robin to
load balance and spread the connections between 3 or 4 servers, I
think that the Alix board could do it, It is only  a hypothetical case
but I would like to know if I can trust on my Alix board to do this
kind of job or not.

In other hand, what kind of embedded hardware do you recomend to
manage this kind of jobs ? maybe the answer could be buying a real
server and replace the hard disk with a CF memory using NanoBSD + PF.

Thanks a lot for your patience.

  

I have a Pentium III machine with 128Mbytes SDRAM
two realtek cards and FreeBSD 6.3
It serves 40 pppoe users (raduis+mysql+mpd).
It connected to a Wi-Max 2Mbps link and does altq shaping (cbq).
In addition spamd and pfstat runs there (there is a bandwidth graphic 
here http 80.76.128.74 ).

More than 500Gbytes/month flows through this gateway.
In general it works satisfactory but as you can see the uptime is no 
good. That is because it has no UPS (ungraceful reboots are often).
It's a very stressful mode and the hardware its runs on is used (I just 
took an old pc of my friend).

But it works more than a year!

Another story :
I build a bittorrent-downloader for my friend lately. It was a P-200MMX 
with two Intel cards and 96Mbytes of RAM.

I tested It in my LAN and It gave about 8Mbps.
So if you take a good hardware network card that performs most the work 
by itself (not by CPU via the driver) I suppose you can easily achieve 
30-50Mbps.


Also read this http://www.openbsd.org/faq/pf/perf.html

--
Code cheap ($3 per an application)

___
freebsd-pf@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "freebsd-pf-unsubscr...@freebsd.org"