Re: 35-40% performance drop releng9 vs releng10 openvpn

2015-03-18 Thread Mike Tancsa
And compiling 1.0.1l on RELENG_9 shows the same performance profile on RELENG_10. Smaller packets are slower, larger are faster 16 bytes 64 bytes256 bytes 1024 bytes 8192 bytes 20245.49k21646.52k22179.87k55431.85k55981.40k R10 34178.77k35559.29k36305.70k

Re: 35-40% performance drop releng9 vs releng10 openvpn

2015-03-18 Thread Mike Tancsa
On 3/18/2015 6:40 PM, Matt Smith wrote: Isn't OpenSSL in the base on releng9 the 0.9.8 version whereas in releng10 it's the 1.0.1 version? This could make a significant difference. I've heard rumours before that the newer version is a lot slower but I've never had cause to believe it. openssl

Re: 35-40% performance drop releng9 vs releng10 openvpn

2015-03-18 Thread Mike Tancsa
On 3/18/2015 6:39 PM, Adrian Chadd wrote: .. ipfw showed up? I can take it out for both. If anything, I want to test with pf ---Mike -- --- Mike Tancsa, tel +1 519 651 3400 Sentex Communications, m...@sentex.net Providing Internet services since 1994 www.sentex.net C

Re: 35-40% performance drop releng9 vs releng10 openvpn

2015-03-18 Thread Holger Kipp
Dear all, > On 18.03.2015, at 23:41, "Matt Smith" wrote: > >> On Mar 18 18:28, Mike Tancsa wrote: >>> On 3/18/2015 5:14 PM, John-Mark Gurney wrote: >>> As I've never used OpenVPN before and their docs don't go into saying >>> what it's using.. Is OpenVPN a kernel or userland VPN? Do they use >>>

Re: 35-40% performance drop releng9 vs releng10 openvpn

2015-03-18 Thread Matt Smith
On Mar 18 18:28, Mike Tancsa wrote: On 3/18/2015 5:14 PM, John-Mark Gurney wrote: As I've never used OpenVPN before and their docs don't go into saying what it's using.. Is OpenVPN a kernel or userland VPN? Do they use IPSec in the kernel? or are they just using UDP or TCP for their connections

Re: 35-40% performance drop releng9 vs releng10 openvpn

2015-03-18 Thread Adrian Chadd
.. ipfw showed up? -a ___ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to "freebsd-stable-unsubscr...@freebsd.org"

Re: 35-40% performance drop releng9 vs releng10 openvpn

2015-03-18 Thread Mike Tancsa
On 3/18/2015 6:28 PM, Mike Tancsa wrote: Will do, I will work on those. Here is the kernel one for now http://tancsa.com/10-kern.svg ---Mike -- --- Mike Tancsa, tel +1 519 651 3400 Sentex Communications, m...@sentex.net Providing Internet services since 1994 www.sent

Re: 35-40% performance drop releng9 vs releng10 openvpn

2015-03-18 Thread Mike Tancsa
On 3/18/2015 5:14 PM, John-Mark Gurney wrote: So, I would first identify the machine w/ the cpu limited load.. I assume that is apu... Yup, the APU. The machines on either side are significantly faster Then I would look at where most of the cpu time is being spent, be it openvpn itself, or

Re: 35-40% performance drop releng9 vs releng10 openvpn

2015-03-18 Thread Charles Swiger
On Mar 18, 2015, at 2:14 PM, John-Mark Gurney wrote: > As I've never used OpenVPN before and their docs don't go into saying > what it's using.. Is OpenVPN a kernel or userland VPN? Do they use > IPSec in the kernel? or are they just using UDP or TCP for their > connections? OpenVPN runs in user

Re: 35-40% performance drop releng9 vs releng10 openvpn

2015-03-18 Thread John-Mark Gurney
Mike Tancsa wrote this message on Wed, Mar 18, 2015 at 15:49 -0400: > On 3/16/2015 9:20 AM, John-Mark Gurney wrote: > > > > Since you have at test framework ready, you could generate some flame > > graphs[1] using dtrace to help see where things might be having an > > impact... > > > > These are ve

[Bug 198549] FreeBSD -STABLE r279935 world fail to build.

2015-03-18 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=198549 --- Comment #1 from sasamotik...@gmail.com --- Problem still not fixed for me. Also strange allergy to "" in argument: /etc/make.conf CPUTYPE?=athlon-xp ok CPUTYPE?="athlon-xp" --- buildworld --- make[1]: "/usr/src/Makefile.inc1" line 169: C

Re: 35-40% performance drop releng9 vs releng10 openvpn

2015-03-18 Thread Mike Tancsa
On 3/16/2015 9:20 AM, John-Mark Gurney wrote: Since you have at test framework ready, you could generate some flame graphs[1] using dtrace to help see where things might be having an impact... These are very easy to generate, and posting them would be useful... [1] http://www.brendangregg.com/