Re: HTTPS throw tunnels

2002-11-09 Thread Dmitry A. Bondareff
And how to find answer ? - Original Message - From: "Nikolai Saoukh" To: <[EMAIL PROTECTED]> Sent: Sunday, November 10, 2002 11:25 AM Subject: Re: HTTPS throw tunnels > | Who knows why the HTTPS protocol work too slow throw tunnels (like IPSEC and > | MPD) ?? > > Well, > to be precise -

Re: HTTPS throw tunnels

2002-11-09 Thread Nikolai Saoukh
| Who knows why the HTTPS protocol work too slow throw tunnels (like IPSEC and | MPD) ?? Well, to be precise -- any kind of traffic through mpd tunnel is slow. A least slower then pptp tunnel between to windows computers. To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-ne

HTTPS throw tunnels

2002-11-09 Thread Dmitry A. Bondareff
Hello! Who knows why the HTTPS protocol work too slow throw tunnels (like IPSEC and MPD) ?? With best regards, Dmitry. To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Packet forwarding overhead - with ipfw counting

2002-11-09 Thread Kevin Day
I have a server acting as a router. Dual bge gigabit network interfaces (PCI-X), one is the WAN side the other is the LAN side. When we're pushing 250-300mbits through, we're using about 15% of its 2.4Ghz P4 Xeon CPU. All of it is in "interrupt" time... that seems a bit high, but that'll still

bug in bge driver with ENOBUFS on 4.7

2002-11-09 Thread Don Bowman
In bge_rxeof(), there can end up being a condition which causes the driver to endlessly interrupt. if (bge_newbuf_std(sc, sc->bge_std, NULL) == ENOBUFS) { ifp->if_ierrors++; bge_newbuf_std(sc, sc->bge_std, m); continue; } happens. Now, bge_newbuf_std returns ENOBUFS. 'm' is also NULL.

Suggestions for tcbhashsize size?

2002-11-09 Thread Don Bowman
Are there any guidelines for setting the tcbhashsize ? I have a system which I'm expecting to keep ~50K TCP connections going. Does it follow standard hash table rules that it should be less than half full? I currently have net.inet.tcp.tcbhashsize: 4096 --don ([EMAIL PROTECTED] www.sandvine.com)

ipfw dummynet and ipfilter conflict?

2002-11-09 Thread Bartek Marcinkiewicz
Hello. I use ipfilter to do NAT and stateful ip filtering and i really like it. I use dummynet to limit bandwidth and i really like it too. The problem is they don't work together in specific situation. my ipf.rules (in simplification): block in log all block out log all pass out quick on ppp0