Re: performance issue within VNET jail

2017-12-21 Thread Michael Grimm
Eugene Grosbein wrote: > 22.12.2017 4:59, Michael Grimm wrote: >>> Make sure and double check that your ESP packets do not get fragmented. >> >> >> Hmm, I do not know how to achieve that. May the following tcpdump excerpts >> answer your question, or do you want me to look somewhere else? >>

Re: performance issue within VNET jail

2017-12-21 Thread Eugene Grosbein
22.12.2017 4:59, Michael Grimm wrote: >> Make sure and double check that your ESP packets do not get fragmented. > > > Hmm, I do not know how to achieve that. May the following tcpdump excerpts > answer your question, or do you want me to look somewhere else? > > At hostA while downloading fro

Re: performance issue within VNET jail

2017-12-21 Thread Michael Grimm
> On 21. Dec 2017, at 22:48, Eugene Grosbein wrote: > > 22.12.2017 4:42, Michael Grimm wrote: > >> Well I prepared on of my webservers running at hostB/jailX to serve a sample >> file for local downloading tests: >> >> 1) hostA wget from hostB/jailX sample file: about 30 MB/s >> 2) host

Re: performance issue within VNET jail

2017-12-21 Thread Eugene Grosbein
22.12.2017 4:42, Michael Grimm wrote: > Well I prepared on of my webservers running at hostB/jailX to serve a sample > file for local downloading tests: > > 1) hostA wget from hostB/jailX sample file: about 30 MB/s > 2) hostA/jailYwget from hostB/jailX sample file: about 30 MB/s >

Re: performance issue within VNET jail

2017-12-21 Thread Michael Grimm
Kristof Provost wrote > On 21 Dec 2017, at 21:50, Michael Grimm wrote: >> Kristof Provost wrote: >>> Can you try turning off TSO? (`ifconfig $ifname -tso`) >>> >>> There have been issues with pf and TSO checksums, which looked a lot like >>> this (i.e. bad TCP performance). Those problems shou

Re: performance issue within VNET jail

2017-12-21 Thread Kristof Provost
On 21 Dec 2017, at 21:50, Michael Grimm wrote: Kristof Provost wrote: On 21 Dec 2017, at 21:24, Michael Grimm wrote: I do have to admit that I am lost here, and that I cannot think about what is going wrong. The last download I did try at my old severs has been some weeks ago. Ever since I

Re: performance issue within VNET jail

2017-12-21 Thread Michael Grimm
Kristof Provost wrote: > > On 21 Dec 2017, at 21:24, Michael Grimm wrote: >> I do have to admit that I am lost here, and that I cannot think about what >> is going wrong. The last download I did try at my old severs has been some >> weeks ago. Ever since I did upgrade FreeBSD 11.1-STABLE, and

Re: performance issue within VNET jail

2017-12-21 Thread Kristof Provost
On 21 Dec 2017, at 21:24, Michael Grimm wrote: I do have to admit that I am lost here, and that I cannot think about what is going wrong. The last download I did try at my old severs has been some weeks ago. Ever since I did upgrade FreeBSD 11.1-STABLE, and I did move my infrastructure from b

performance issue within VNET jail

2017-12-21 Thread Michael Grimm
Hi [ I did recently migrate my servers from bare metal to cloud instances (OpenStack at OVH) ] [ FreeBSD 11.1-STABLE #0 r327055 ] My setup is as follows and didn't change for the last couple of years: extIF0/pf/NAT <—> epairXa (