Re: ICMP question

2002-11-10 Thread Nimrod Mesika
Looking at FreeBSD's source code, it seems like you can't disable this feature. Now, I don't really see the point in disabling it (at most the TCP source may choose to ignore such a message), but you can always use IPFW to drop all such packets. On Wed, Nov 06, 2002 at 12:32:29PM +0200, Girnet Vl

RE: Packet forwarding overhead - with ipfw counting

2002-11-10 Thread Don Bowman
From: Kevin Day [mailto:toasty@;dragondata.com] > When we're pushing 250-300mbits through, we're using about 15% of its > 2.4Ghz P4 Xeon CPU. All of it is in "interrupt" time... that > seems a bit > high, but that'll still let us max things out at 1gbit so we're ok. Try applying these diff to y

Re: HTTPS throw tunnels

2002-11-10 Thread Nikolai Saoukh
On Sun, Nov 10, 2002 at 01:52:37AM -0800, Julian Elischer wrote: | I have seen several MB/sec through mpd tunnels. (mpd running over IPSEC) Are you running under -stable? I do. | I HAVE seen some tunnel freezes under mpd and am working with archie to fix it, | however it got a lot better with th

Re: HTTPS throw tunnels

2002-11-10 Thread Dmitry A. Bondareff
Right now I have FreeBSD 4.7 RELEASE and MPD 3.10 All works fine and quick, but HTTPS send some packets and then halt for a time, after that send 2 packets and halting again. With IPSEC channel HTTPS works similar. - Original Message - From: "Julian Elischer" <[EMAIL PROTECTED]> To: ; <[E

Re: Packet forwarding overhead - with ipfw counting

2002-11-10 Thread Luigi Rizzo
another way to do the count efficiently is to use dummynet dynamic pipes: ipfw add 100 pipe 1 ip from 10.0.0.0/24 to any ipfw add 100 pipe 2 ip from any to 10.0.0.0/24 ipfw pipe 1 config mask src-ip 0x ipfw pipe 2 config mask dst-ip 0x sysctl

Re: HTTPS throw tunnels

2002-11-10 Thread Julian Elischer
> | > to be precise -- any kind of traffic through mpd tunnel is slow. > | > A least slower then pptp tunnel between to windows computers. > | And how to find answer ? > I have no answer yet. As well as to another problem where mpd > tunnel freezes after some time. well it takes a while for peo

Re: Packet forwarding overhead - with ipfw counting

2002-11-10 Thread Julian Elischer
oops, duh, Take the 'count' keyword out.. they count anyhow.. To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: Packet forwarding overhead - with ipfw counting

2002-11-10 Thread Julian Elischer
> I have a server acting as a router. Dual bge gigabit network interfaces > (PCI-X), one is the WAN side the other is the LAN side. > When we're pushing 250-300mbits through, we're using about 15% of its > 2.4Ghz P4 Xeon CPU. All of it is in "interrupt" time... that seems a bit > high, but tha

Re: HTTPS throw tunnels

2002-11-10 Thread Nikolai Saoukh
| > to be precise -- any kind of traffic through mpd tunnel is slow. | > A least slower then pptp tunnel between to windows computers. | And how to find answer ? I have no answer yet. As well as to another problem where mpd tunnel freezes after some time. To Unsubscribe: send mail to [EMAIL PROT