Re: FRR + OSPF/BGP ECMP

On Fri, Dec 9, 2022 at 10:59 AM Victor Gamov wrote: > Hi All > > Does FreeBSD support ECMP while using FRR + OSPF/BGP? > > > If compiled with MULTIPATH option, yes it should work. This option isn't enabled by default, I should enable it. Old example of a setup here: https://bsdrp.net/documentati

Re: FRR + OSPF/BGP ECMP

On Fri, Dec 9, 2022 at 8:56 PM Oleksandr Kryvulia wrote: > > It is enabled by default since eb0b1b33d5af > > I was referring to the MULTIPATH option on the net/frr8 port (not FreeBSD

Re: FRR + OSPF/BGP ECMP

On Sat, Dec 10, 2022 at 4:44 PM Victor Gamov wrote: > > > So, OS-related MULTIPATH is "turned on" _and_ FRR MULTIPATH is "turned > on" but freshports says "MULTIPATH=off: Enable multipath function" > > Or some misunderstanding here? > I was misunderstanding :-) I wasn't expecting net/frr8 to su

Re: RPKI on FRRouting

Hi, Yes RPKI option is enabled by default: https://cgit.freebsd.org/ports/tree/net/frr8/Makefile#n73 so the package came with lib/frr/modules/bgpd_rpki.so https://cgit.freebsd.org/ports/tree/net/frr8/pkg-plist#n157 But I've never tested it. Regards, Olivier On Wed, Dec 14, 2022 at 6:29 PM Cris

Re: ::1/128 and 127.0.0.1 address creation ownership

On Mon, May 22, 2023 at 12:53 PM Alexander Chernikov wrote: > > My main question here is the desired ownership model. I don’t have a > strong opinion on whether the userland of the kernel should own loopback > creation. > However, I think that: > 1) the behaviour should be consistent (either both

Re: Request for Testing: TCP RACK

On Thu, Nov 16, 2023 at 5:10 PM Herbert J. Skuhra wrote: > > OK, I am now running GENERIC-NODEBUG + "options TCPHPTS". > > After setting "sysctl net.inet.tcp.functions_default=rack" git no > longer works: > > Are you using a fresh 15 head or a specific network setup ? Because I'm not able to rep

Re: Request for Testing: TCP RACK

On Fri, Nov 17, 2023 at 2:31 PM Herbert J. Skuhra wrote: > > 1. It even fails with a simple pf.conf: >pass in all >pass out all > > 2. Fetching port distfiles also failed. > > 3. If I disable rxcsum on the ethernet adapter (igb0) it works. > > > I can't reproduce it with pfctl too (same i

Re: dropping udp fragments with ipfw

On Thu, Aug 29, 2024 at 8:52 PM mike tancsa wrote: > But this would kill all UDP fragments. If the host has some other UDP > application that needs to deal with fragmented packets, is there a way > to get around that and only drop packets with a certain port in the > first fragment ? > > When a

Re: kern/165903: mbuf leak

Hi, PR closed too soon ? All of our firewalls just migrated to 9.0 firewall (carp + pfsync) hit memory leak problem. Here is some output: Mem: 17M Active, 15M Inact, 1709M Wired, 1392K Cache, 143M Buf, 229M Free => 1709M Wired just for a firewall ? On other machine: # netstat -m 2188812/1278

Re: kern/165903: mbuf leak

On Fri, Apr 12, 2013 at 1:54 PM, Gleb Smirnoff wrote: > On Fri, Apr 12, 2013 at 01:45:51PM +0200, Olivier Cochard-Labb? wrote: > O> PR closed too soon ? > > It isn't closed, it is in patched state. This means that problem > is considered solve in the head branch, but not in any stable branch. Ok,

panic: ifmedia_set when pluging CardBus LAN card xl(4) on 9.1-release

Hi, When I'm plugging CardBus PC Card (3CXFE575BT) on my old laptop it produces a crash. Full core dump here (30MB): http://gugus69.free.fr/freebsd/crash.cardbus.3CXFE575BT.tgz Here an extract of the core.txt file: xl0: <3Com 3c575B Fast Etherlink XL> port 0x1080-0x10ff mem 0x9001-0x9001007

forwarding/ipfw/pf evolution (in pps) on -current

Hi all, here is the result of my simple-and-dummy bench script regarding forwarding/ipfw/pf performance evolution on -current on a single-core server with one flow only. It's the result of more than 810 bench tests (including reboot between each) done twice for validating my methodology. # Discla

Re: forwarding/ipfw/pf evolution (in pps) on -current

On Wed, Apr 24, 2013 at 1:46 PM, Sami Halabi wrote: > Oliver, > Great and impressive job. Thanks, > 3. there some point of improved performance (without fw) that went down > again somewhere before Clang got prod. => Yes, I'm still working on detected the commit that create this degradation. >

Re: forwarding/ipfw/pf evolution (in pps) on -current

On Wed, Apr 24, 2013 at 1:46 PM, Sami Halabi wrote: > 3. there some point of improved performance (without fw) that went down > again somewhere before Clang got prod. Found it ! It's commit 242402: "Rework the known mutexes..." ministat -s 242401.forwarding 242402.forwarding x 242401.forwarding

Re: pf performance?

On Fri, Apr 26, 2013 at 3:42 PM, Gleb Smirnoff wrote: > > In FreeBSD 10 pf is no longer under single lock. On your hardware, > I'd expect a measurable performance gain if you migrate to 10. Compairing 9.1 and current (249908) on my new test-server (HP ProLiant DL320 G5, dual-core Xeon 3050, dual

Re: pf performance?

On Fri, Apr 26, 2013 at 7:16 PM, Adrian Chadd wrote: > Do you have witness, etc enabled in -current? > Hi Adrian, Of course not :-) The src.conf have: MALLOC_PRODUCTION= And the kernel have: include GENERIC nomakeoption DEBUG nooptions DDB nooptions GDB nooptions

Re: forwarding/ipfw/pf evolution (in pps) on -current

On Thu, Apr 25, 2013 at 11:28 AM, Andre Oppermann wrote: > > > Again one has to be really careful drawing any firm conclusions from this > as it was measured on a Pentium4 and UP kernel (GENERIC would add WITNESS > and INVARIANT overhead as well). > > The Pentium4 is about the worst micro-architec

Re: kern/165903: mbuf leak

The following reply was made to PR kern/165903; it has been noted by GNATS. From: =?ISO-8859-1?Q?Olivier_Cochard=2DLabb=E9?= To: bug-follo...@freebsd.org, eug...@zhegan.in Cc: Subject: Re: kern/165903: mbuf leak Date: Mon, 6 May 2013 17:48:41 +0200 Same problem here on all my firewalls (FreeB

Re: how to completely makes an interface down?

On Tue, May 14, 2013 at 2:02 PM, Eugene Grosbein wrote: > > I've needed this feature several years ago so I made a patch for igb(4) and > em(4) drivers. > The patch introduces new per-interface sysctls with default zero values: > > dev.em.X.down_disables_link > dev.igb.X.down.disables_link > > Wi

Re: Netmap on em(4) newcomer (first steps)

On Thu, Jun 13, 2013 at 2:56 PM, Eduardo Meyer wrote: > Ive read Olivier's (BSDRP) benchs sent to current@ and there seem no > particular configuration for packet forwarding. So o dunno what I may be > lacking. > > What and where output netmap verbose is supposed to generate? > Hi Eduardo, my ben

netstat -i not accurate on -stable ?

Hi all, I was testing my pthread-netblbast (PR bin/179085) when I found a problem with netstat counters (tested on 9-stable r252056). netreceive (src/toots/tools/netrate) display this output: 542025 pps 43.362 Mbps - 271554 pkts in 0.500998393 ns 541562 pps 43.325 Mbps - 271323 pkts i

How correctly use netmap pkt-gen "sweep n addresses" option ?

Hi, I'm using netmap pkt-gen as a packet generator/receiver and it's working great for generating one-flow (one src/dst IP address). But I would like generate packets with multiples source&destination IP addresses. pkt-gen support "range" IP and MAC address: -d dst-ip end with %n t

Re: Flow ID, LACP, and igb

On Mon, Sep 2, 2013 at 2:47 PM, Barney Cordoba wrote: > > In a week I ripped out the offload crap and the 9000 sysctls, eliminated the > "consumer buffer" problem, reduced locking by 40% and now the igb driver > uses 20% less cpu with a full gig load. > Wow! where is the patch ? I would like to

Re: Network stack changes

On Sat, Sep 14, 2013 at 4:28 PM, Luigi Rizzo wrote: > > IXIA ? For the timescales we need to address we don't need an IXIA, > a netmap sender is more than enough > The great netmap generates only one IP flow (same src/dst IP and same src/dst port). This don't permit to test multi-queue NIC (or SM

Re: Hint about netmap

On Sun, Jun 1, 2014 at 2:23 PM, Mohammad Badie Zadegan wrote: > Hi Everybody, > > I have a question about netmap(the fast packet I/O framework) > I have released my own firewall and now I want to test it at the maximum > packet/s range that available but still I can not select netmap or pktgen! >

Re: tuning routing using cxgbe and T580-CR cards?

On Fri, Jul 11, 2014 at 8:03 PM, Bjoern A. Zeeb < bzeeb-li...@lists.zabbadoz.net> wrote: > On 11 Jul 2014, at 17:28 , John Jasem wrote: > > > c) the defaults for the cxgbe driver appear to be 8 rx queues, and N tx > > queues, with N being the number of CPUs detected. For a system running > > mult

Re: Uanble to use mpd5 as a gateway VPN, FreeBSD

On Mon, Jul 30, 2012 at 4:14 PM, Bernard Higonnet wrote: > > It would appear (sic) that requests from Y to a machine on A are received by > that machine. However, nothing ever comes back. > > All these machines are running FreeBSD, 8 on Z, and 9.0 on X and Y. > Hi, I've set-up a similar scenario

Re: ipfw meets netmap (6.5 Mpps in userspace)

On Mon, Aug 13, 2012 at 1:17 PM, Luigi Rizzo wrote: > I just finished a netmap-enabled version of ipfw/dummynet, which > runs in userspace and is able to process over 6 million packets per > second (Mpps) with simple rulesets, and over 2.2 Mpps through > dummynet pipes (tested on an i7-3400 connec

Re: enc(4) uninitialized in -current?

On Thu, Sep 27, 2012 at 12:10 AM, Marcin Cieslak wrote: > I have just updated by 9.0-something laptop to 10.0-CURRENT r240948 > and it very quickly panics after enabling network with IPsec > (I am using IPsec w/racoon for IPv4 over 802.11, also using > tunelled IPv6). I don't know if it's related

Re: [CFT/Review] net byte order for AF_INET

I've done some tests with this net byte ordered(NBO) patch: - I've compiled 2 i386 images of BSD Router Project (current branch rev241418): One with the patch, and the other without the patch [1] - I've run my "full-features testing lab" under VirtualBox [2] using theses images. Here are the diffe

How to use netmap pkt-gen on 9.1?

Hi, I'm try to use netmap pkt-gen on real and virtual (virtualbox) hardware with FreeBSD 9.1. My setup is pretty simple: ( HOST1 em0:1.1.1.1 ) <--> ( em0:1.1.1.2 HOST2 ) But I didn't reach to use pkt-gen (from tools/tools/netmap), I've got errors (on both physical and virtual machines): - Una

Re: How to use netmap pkt-gen on 9.1?

On Wed, Jan 9, 2013 at 12:02 AM, Luigi Rizzo wrote: > not your mistake, on stable/9 i have not merged yet the > device driver changes. > Your best option is to copy sys/dev/netmap from HEAD, > and add the device-specific chunks also from HEAD > into the various drivers (dev/e1000, dev/ixgbe, dev/

Re: How to use netmap pkt-gen on 9.1?

On Wed, Jan 9, 2013 at 2:54 PM, Luigi Rizzo wrote: > you need to add a "device netmap" option in your kernel config file in order > to > build the device drivers with the required changes. "device netmap" was the forgotten part ! Now I reach to use it on -current and, following your advice, on

Re: How to use netmap pkt-gen on 9.1?

On Wed, Jan 9, 2013 at 5:50 PM, Olivier Cochard-Labbé wrote: > > Now I reach to use it on -current and, following your advice, on 9.1 too. > The patch (for 9.1-release) that I've used his here: > http://gugus69.free.fr/freebsd/freebsd.netmap.patch > Hi, I've just di

How to protect RIPng or OSPFv3 with IPsec ?

Hi, I'm trying to protect RIPng and OSPFv3 (I'm using Quagga and Bird), but I didn't know how to manage multicast traffic with setkey. Does someone have an example of /etc/ipsec.conf for protecting RIPng or OSPF3 ? Thanks, Olivier ___ freebsd-net@freeb

Re: How to protect RIPng or OSPFv3 with IPsec ?

Hi Yvan, 2011/9/28 VANHULLEBUS Yvan : > >> I'm trying to protect RIPng and OSPFv3 (I'm using Quagga and Bird), >> but I didn't know how to manage multicast traffic with setkey. > > You can't: IPsec has NOT be designed to protect multicast traffic > (well, there are actually at least some drafts in

Re: 9.3 RELEASE not forwarding pkt-gen (netmap) packets over XenServer

On Tue, Aug 26, 2014 at 9:35 PM, Raimundo Santos wrote: > > 15:38:13.286119 00:1b:21:53:51:3d > 00:1b:21:53:51:39, ethertype IPv4 > (0x0800), length 60: (tos 0x10, ttl 64, id 0, offset 0, flags [DF], proto > UDP (17), length 46, bad cksum 6605 (->6604)!) > > 10.0.0.1.0 > 192.168.10.2.0: [bad

Re: [PATCH] Fix integer truncation in systat -ifstat

On Fri, Sep 12, 2014 at 8:41 AM, Bruce Evans wrote: > Only differences in the counters are used except in 1 place that is > broken in other ways, so overflow is only a large problem starting at > about 40 Gbps. At only 10 Gbps, 32-bit counters are enough with a > refresh interval of 1 second bu

Re: IP fast forwarding and setkey

On Sun, Sep 21, 2014 at 12:08 PM, Paul S. wrote: > Hi folks, > > I plan to make an edge router out of a freebsd system with OpenBGPD + > FreeBSD 10, or such. > > I've been reading up, and noticed that the net.inet.ip.fastforwarding flag > provides rather nice performance benefits. > > My issue is

Re: Enabling VIMAGE by default for FreeBSD 11?

On Tue, Oct 14, 2014 at 8:20 AM, Craig Rodrigues wrote: > On Sat, Oct 11, 2014 at 1:20 PM, Alexander V. Chernikov > wrote: > > > > > On 11 Oct 2014, at 21:58, Craig Rodrigues wrote: > > > > > Hi, > > > > > > What action items are left to enable VIMAGE by default for FreeBSD 11? > > Are there an

Re: Multicast routing, IGMP, IPTV doubts..

On Tue, Oct 14, 2014 at 11:57 PM, Marek Salwerowicz wrote: > > Unfortunately after starting igmpproxy: > > # igmpproxy -d -vv igmpproxy.conf > > the igmpproxy starts but can't build routing table: > Current routing table (Age active routes): > -

Re: IPSEC in GENERIC [was: Re: netmap in GENERIC, by default, on HEAD]

How to correctly bench IPSec performance ? For benching forwarding performance I generate minimum-size packet (2000 flows: 100 different source IP * 20 different destination IP) like with this netmap's pkt-gen example: pkt-gen -i ix0 -f tx -n 10 -l 60 -d 9.1.1.1:2000-9.1.1.100 -s 8.1.1.1:2

Re: IPSEC in GENERIC [was: Re: netmap in GENERIC, by default, on HEAD]

On Thu, Nov 6, 2014 at 3:46 PM, Hooman Fazaeli wrote: > > => This permit me to obtain the maximum PPS forwarded by the server. >> > May be off-topic: How much PPS and on which hardware? > It seems I'm not clear: My question is just "What is the correct methodology for benching IPSec performance

Re: is polling still a thing?

On Tue, Jan 27, 2015 at 7:19 PM, Antoine Beaupré wrote: > On 2015-01-27 13:03:19, Jim Thompson wrote: > > > > > Have you considered FreeBSD 10.1? > > Not yet. What should i expect from the upgrade? We just barely made it > to 9.3 at this point... > Here is an old bench comparing pf improvement s

Re: is polling still a thing?

On Tue, Jan 27, 2015 at 9:15 PM, Michael Sierchio wrote: > > > On small, embedded computers running ipfw w/kernel nat and device polling > enabled (on em ether adapters), I observed the *reported* system load grow > very high. When disabling polling on the interfaces, it went back to > something

IEE1588/PTP support for NIC drivers ?

Hi, Some network cards support IEE1588 hardware timestamp (like some Intel card), but their drivers didn't support this feature. I beleive there is a kernel feature missing for this suppport. Searching on the archive's mailing-list, I've found this post about some legal issue: https://lists.freeb

Re: Troubles with 'em' driver and UDP packets

On Fri, Mar 20, 2015 at 10:23 AM, Vaidas Damoševičius wrote: > Hello, > ​Hi, ​ > > I have 2 boxes with FreeBSD 10.1-RELEASE/amd64 and "Intel(R) PRO/1000 > Network Connection 7.4.2" NIC's directly connected to each other. I noticed > strange problem - I'm loosing small UDP packets under high lo

No multicast routing support on Virtio vtnet(4) drivers ?

I'm trying to set-up a multicast network lab using bhyve (then the vtnet interfaces). But when starting a PIM multicast routing daemon, I've got this error message: [root@router]~# service pimd start Starting pimd. pimd: 17:22:59.119 Failed adding VIF 0 (MRT_ADD_VIF) for iface vtnet0:(error 45): O

Re: NFS on 10G interface terribly slow

On Mon, Jun 29, 2015 at 9:19 AM, Gerrit Kühn wrote: > On Fri, 26 Jun 2015 20:42:08 -0400 (EDT) Rick Macklem > wrote about Re: NFS on 10G interface terribly slow: > > RM> Btw, can you tell us what Intel chip(s) you're using? > > I have > > ix0@pci0:5:0:0: class=0x02 card=0x00028086 chip=0x152

Re: Exposing full 32bit RSS hash from card for ixgbe(4)

On Wed, Aug 5, 2015 at 1:15 AM, Barney Cordoba via freebsd-net < freebsd-net@freebsd.org> wrote: > What's the point of all of this gobbledygook anyway? Seriously, 99% of the > world needs a driver that passes packets in the most efficient way, and > every time I look at igb and ixgbe it has anothe

Re: Poor high-PPS performance of the 10G ixgbe(9) NIC/driver in FreeBSD 10.1

On Tue, Aug 11, 2015 at 11:18 PM, Maxim Sobolev wrote: > Hi folks, > > ​Hi, ​ > We've trying to migrate some of our high-PPS systems to a new hardware that > has four X540-AT2 10G NICs and observed that interrupt time goes through > roof after we cross around 200K PPS in and 200K out (two ports

How to disable useless Intel NIC "Warning" message when using heretic SFP

​​As a responsible adult, I've voluntary set this line in my boot/loader.conf: hw.ix.unsupported_sfp="1" But my Intel NIC is still considering me as a child by polluting my dmesg with lot's of message like this one: WARNING: Intel (R) Network Connections are quality tested using Intel (R) Etherne

[CFT] projects/routing + tryforward and netmap-fwd

Hi all, I've build a nanobsd image based on different FreeBSD projects related to routing performance: - melifaro's projects/routing r289642 (synced with a head r287493) - gnn's tryforward improvement (D3737) - loos'netmap-fwd These improvement brings: - Routing performance on multi-core should b

Re: Bidirectional Forwarding Detection

On Mon, Dec 4, 2017 at 1:53 PM, yar wrote: > Hello All. > > Does FreeBSD support BFD (Bidirectional Forwarding Detection)? > rfc5880, rfc5881 ​Hi, BFD is supported (ie: not filtered) by FreeBSD: you just need to use a BFD daemon software. If your question was "Does FreeBSD includes a BFD daem

Re: 11.2-RC1 setkey invalid spi ?

On Tue, Jun 12, 2018 at 4:02 PM Patrick Lamaiziere wrote: > Le Tue, 12 Jun 2018 14:34:47 +0200, > Patrick Lamaiziere a écrit : > > Hello > ​Hi Patrick, ​ > > Well I can reproduce this problem by using setkey(8) : > > /etc/ipsec.conf > add 129.20.128.78 129.20.128.149 tcp 0x1000 -A tcp-md5 "sec

Re: 11.2-RC1 bird 2 BGP invalid ipsec SA/SP

On Tue, Jun 12, 2018 at 2:35 PM Patrick Lamaiziere wrote: > Hello, > > I'm trying Bird 2 on FreeBSD 11.2 using tcp md5 signature for BGP > connections. > > Bird2 has an option to set the needed ipsec SA/SP but here this does > not work. > > > ​It will work if you 'help' bird to know the source ad

Re: freebsd stack in user space

On Fri, Sep 7, 2018 at 3:56 AM Julian Elischer wrote: > I know some people have done this.. anyone have pointers? > > > Hi Julian, libuinet: https://github.com/pkelsey/libuinet A presentation about: https://www.youtube.com/watch?v=LhIx8q8_7YY ___ fre

Re: IPsec: is it possible to encrypt transit traffic in transport mode?

On Fri, Nov 30, 2018 at 1:05 PM Lev Serebryakov wrote: > I'm benchmarking different possible "native" VPN configurations and I have > gif(4) and gre(4) with and without IPsec in my battery. I have tunnel mode > IPsec too. Problem with gif(4) and gre(4) that hey are tremendously > expensive, a

Re: FRR on FreeBSD 12 - problems with OSPFv3

On Fri, Oct 11, 2019 at 5:07 PM Rudy wrote: > > I just recompiled from ports - same error. > > > 2019/10/11 08:03:50 ZEBRA: [EC 4043309117] Client 'ospf6' encountered > an error and is shutting down. > > There is either a configuration error I am missing, or there is a bug in > handling IPv6 in

Re: Multicast routing on FreeBSD 11 current

On Sun, Jan 24, 2016 at 9:41 AM, Ben Woods wrote: > > Hi everyone, > > Could someone running FreeBSD current on a test machine try loading the > ip_mroute driver on their machine? > ​Hi, no problem here: root@lame5 # uname -a FreeBSD lame5.bsdrp.net 11.0-CURRENT FreeBSD 11.0-CURRENT #0 r294522

Re: igb/pf-related crashes

On Wed, Sep 21, 2016 at 4:22 PM, Gerrit Kühn wrote: > Hi all, > > Over the last weekend, I saw a couple of crashes on a 10.3-system acting > as filtering bridge with pf that all looked like this: > ​I've got this problem on low RAM VM (about 196MB of RAM) during lot's of fragmented packet storm.

Re: [RFC/RFT] projects/ipsec

On Sun, Dec 11, 2016 at 12:07 AM, Andrey V. Elsukov wrote: > Hi All, > > I am pleased to announce that projects/ipsec, that I started several > months ago is ready for testing and review. > The main goals were: > * rework locking to make IPsec code more friendly for concurrent > processing;

Re: Disappointing packets-per-second performance results on a Dell, PE R530

On Tue, Jan 3, 2017 at 5:35 PM, Jordan Caraballo < jordancaraball...@gmail.com> wrote: > We recently tested a Dell R530 with a Chelsio T580 card, under FreeBSD > 10.3, 11.0, -STABLE and -CURRENT, and Centos 7. > > Based on our research, including netmap-fwd and with the routing > improvements proj

Re: HEADS-UP: IFLIB implementations of sys/dev/e1000 em, lem, igb pending

On Tue, Jan 10, 2017 at 4:31 AM, Sean Bruno wrote: > > I've updated sys/dev/e1000 at svn R311849 to match Matt Macy's work on > IFLIB in the kernel. > > At this point, the driver deviates from Intel's code dramatically and > you now get to yell directly into the freebsd-net@ megaphone for things

Re: HEADS-UP: IFLIB implementations of sys/dev/e1000 em, lem, igb pending

On Wed, Jan 11, 2017 at 4:17 PM, Sean Bruno wrote: > > > Olivier: > > Give this a quick try. This isn't the correct way to do this, but I > want to see if I'm on the right path: > ​thanks, it fix the problem, I've got back the 4 queues:​ ​igb2: port 0x3000-0x301f mem 0xdfea-0xdfeb,0xd

Re: HEADS-UP: IFLIB implementations of sys/dev/e1000 em, lem, igb pending

On Wed, Jan 11, 2017 at 9:13 PM, Matthew Macy wrote: > > > Hmmm ... did your old tests do 4 or 8 queues on this hardware? > > > > Did the old tests run 1024 tx/rx slots or the max 4096? > > That's a great point, only having one thread per core could easily account > for this. I'm hoping Sean c

Re: HEADS-UP: IFLIB implementations of sys/dev/e1000 em, lem, igb pending

On Wed, Jan 11, 2017 at 9:40 PM, Matthew Macy wrote: > > > > I can generate profiling data for you: what kind of data do you want > ? > > > > > > > A flame graph for the core cycle count and a flame graph with cache miss > stats from pmc would be a great start. > > ​I didn't know the exact e

Re: HEADS-UP: IFLIB implementations of sys/dev/e1000 em, lem, igb pending

On Thu, Jan 12, 2017 at 1:54 AM, Matthew Macy wrote: > > A flame graph for the core cycle count and a flame graph with cache > miss stats from pmc would be a great start. > > > > > > ​I didn't know the exact event name to use for cache miss stats, but > here are the flame graphs for CPU_CLK_

Re: HEADS-UP: IFLIB implementations of sys/dev/e1000 em, lem, igb pending

On Tue, Jan 24, 2017 at 2:40 AM, Sean Bruno wrote: > > > Which set of configs from your test suite are you using for this? > Specifically, what packet size are you slamming across? > > https://github.com/ocochard/netbenches/tree/master/pktgen.configs > ​Because I'm in the point of view of a Telc

Re: HEADS-UP: IFLIB implementations of sys/dev/e1000 em, lem, igb pending

On Tue, Jan 24, 2017 at 3:17 PM, Sean Bruno wrote: > > > Did you increase the number of rx/tx rings to 8 and the number of > descriptors to 4k in your tests or just the defaults? > Tuning are same as described in my previous email (rxd|txd=2048, rx|tx process_limit=-1, max_interrupt_rate=16000).

Re: Disappointing packets-per-second performance results on a Dell, PE R530

On Tue, Jan 31, 2017 at 6:53 PM, Jordan Caraballo < jordancaraball...@gmail.com> wrote: > This are the most recent stats. No advances so far. The system has > -Current right now. > > Any help or feedback would be appreciated. > > ​I've tried: But you didn't answer my previous question. How do you

Re: Disappointing packets-per-second performance results on a Dell, PE R530

​​ ​​ On Wed, Feb 1, 2017 at 1:00 AM, Jordan Caraballo < jordancaraball...@gmail.com> wrote: > Hi Oliver, my bad, I missed that one. Here is the info: > > * Switch with 48x 10G ports and 12x 40G ports was used > * (48) 10G connected nodes were used. > * (24) nodes on each side of the firewall > *

How to enable ECMP flow based forwarding ?

Hi, I'm testing FreeBSD ECMP behavior by adding "options RADIX_MPATH" to my kernel configuration (11-stable). Now I can configure two identical routes toward 2 different next-hop: First step achieved :-) But it uses only the first entry and never uses the second one. I've tried to shutdown the fi

Re: How to enable ECMP flow based forwarding ?

On Wed, Feb 15, 2017 at 6:17 PM, Ermal Luçi wrote: > > >> Yeah but for 11 branch still is. > > ​FIB4 KPI was MFC to 11-stable branch 6 weeks ago (r310771). ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net

Re: Fwd: Re: Disappointing packets-per-second performance results on a Dell,PE R530

On Tue, Feb 28, 2017 at 3:13 AM, Caraballo-vega, Jordan A. (GSFC-6062)[COMPUTER SCIENCE CORP] wrote: > As a summarywe have a Dell R530 with a Chelsio T580 cardwith -CURRENT. > > In an attempt to reduce the time the system was taking to look for the > cpus; we changed the BIOS setting to let the s

Re: Are ./valte-ctl and ./bridge friends or competitors?

On Fri, Mar 17, 2017 at 6:51 PM, Vincenzo Maffione wrote: > > When using your physical NICs with netmap, you need to disable the > offloadings because netmap is not able to program the NIC to perform these > offloadings. This is a design decision that has been taken to preserve > simplicity and e

Re: state of packet forwarding in FreeBSD?

On Wed, Jun 14, 2017 at 4:48 PM, John Jasen wrote: > > b) On the negative side, between the various releases, netmap appeared > to be unstable with the Chelsio cards -- sometimes supported, sometimes > broken. Also, we're still trying to figure out netmap utilities, such as > vale-ctl and bridge,

Re: state of packet forwarding in FreeBSD?

On Wed, Jun 14, 2017 at 7:36 PM, Navdeep Parhar wrote: > > I think I fixed this a long time back. Have you tried recently? We > moved the netmap functionality to the vcxl interfaces and it should > just work. > > ​ It stills panic with an -head build today. _

Re: How to disable tryforward ?

On Wed, Oct 30, 2019 at 9:44 AM k simon wrote: > Hi, Andrey, > OK, I’ve got it. Radix_mpath.h file is not included in input.c. > Maybe someone can fix and commit it. Thanks for your reply! > > But does including this header file enough to fix ECMP forwarding ? ___

Re: 10g IPsec ?

On Tue, Nov 5, 2019 at 8:15 PM John-Mark Gurney wrote: > AES-GCM can run at over 1GB/sec on a single core, so as long as the > traffic can be processed by multiple threads (via multiple queues > for example), it should be doable. > > I didn't bench this setup (10Gb/s IPSec) but I believe we will

Re: Issue with BGP router / high interrupt / Chelsio / FreeBSD 12.1

On Fri, Feb 14, 2020 at 6:25 PM Rudy wrote: > On 2/12/20 7:21 PM, Rudy wrote: > > I'm having issues with a box that is acting as a BGP router for my > network. 3 Chelsio cards, two T5 and one T6. It was working great > until I turned up our first port on the T6. It seems like traffic > passin

Re: poor performance with Intel X520 card

On Fri, Jul 10, 2020 at 8:45 AM Patrick Lamaiziere wrote: > Hello, > > That is mostly for the record but it looks like the intel X520 is not > very good and generates a high level of interrupts. > > On a router / firewall with 500 Kpps in input (dropped by pf) is enough to > put the CPUs at > 100

Re: mlx5 irq

On Thu, Oct 1, 2020 at 12:28 PM Hans Petter Selasky wrote: > On 2020-10-01 11:13, Michal Vančo via freebsd-net wrote: > > On 01/10/2020 10:52, Hans Petter Selasky wrote: > >> On 2020-10-01 10:24, Michal Vančo wrote: > >>> But why is the actual number of IRQ lines bigger than number of CPU > >>> c

Re: net/bird2 and OSPF v3

On Mon, Dec 14, 2020 at 8:19 AM Victor Sudakov wrote: > Dear Colleagues, > > Can anyone please share a *working* net/bird2 config with OSPFv3 > doing both IPv4 and IPv6 routing? > > Works fine for me with "protocol ospf v2", but as soon as I switch to > "protocol ospf v3" I lose all IPv4 network

Re: Netmap Library not getting installed on custom kernel installation

On Wed, Dec 16, 2020 at 9:53 PM Vincenzo Maffione wrote: > > On a side note, the netmap tools (pkt-gen, bridge, lb, etc.) should really > be a port. Another TODO item. > > There is already one port for an old version of pkt-gen: https://svnweb.freebsd.org/ports/head/net/pkt-gen/ And here is a cu

Re: option FIB_ALGO and dpdk_lpm4

On Wed, Feb 24, 2021 at 1:22 AM Marek Zarychta < zarych...@plan-b.pwste.edu.pl> wrote: > > > > > Please let me ask only one final question. Does adding: > > net.route.algo.inet.algo=dpdk_lpm4 > net.route.algo.inet6.algo=dpdk_lpm6 > > to /etc/sysctl.conf make any sense? I see that right FIB_ALGO i

Re: All transmits on txq0 on an ix interface - why no balancing?

On Wed, Apr 14, 2021 at 1:35 AM Phil Rosenthal wrote: > Hello, > > I have spent a few hours trying to figure this out, and can't seem to make > any progress. All transmits on my ix interfaces seem to use a single queue, > txq0... which is resulting in occasional drops: > > Are you exiting through