Re: PF performance problem

Ariane van der Steldt wrote: On Wed, Jun 03, 2009 at 10:07:33PM -0700, patrick keshishian wrote: On Wed, Jun 3, 2009 at 3:50 AM, Richard Toohey wrote: On 3/06/2009, at 10:02 PM, BARDOU Pierre wrote: Hello, I have performance issues on a OpenBSD 4.4 firewall. CPU load is OK (a

Re: PF performance problem

On Thu, Jun 4, 2009 at 6:48 AM, Darrin Chandler wrote: > On Wed, Jun 03, 2009 at 10:07:33PM -0700, patrick keshishian wrote: >> On Wed, Jun 3, 2009 at 3:50 AM, Richard Toohey >> wrote: >> > On 3/06/2009, at 10:02 PM, BARDOU Pierre wrote: >> > >> >> Hello, >> >> >> >> I have performance issues on

Re: PF performance problem

On Thu, Jun 4, 2009 at 1:48 AM, Ariane van der Steldt wrote: > On Wed, Jun 03, 2009 at 10:07:33PM -0700, patrick keshishian wrote: >> On Wed, Jun 3, 2009 at 3:50 AM, Richard Toohey >> wrote: >> > On 3/06/2009, at 10:02 PM, BARDOU Pierre wrote: >> > >> >> Hello, >> >> >> >> I have performance issu

Re: PF performance problem

On Wed, Jun 03, 2009 at 10:07:33PM -0700, patrick keshishian wrote: > On Wed, Jun 3, 2009 at 3:50 AM, Richard Toohey > wrote: > > On 3/06/2009, at 10:02 PM, BARDOU Pierre wrote: > > > >> Hello, > >> > >> I have performance issues on a OpenBSD 4.4 firewall. > >> CPU load is OK (always below 50%), b

Re: PF performance problem

On Wed, Jun 03, 2009 at 10:07:33PM -0700, patrick keshishian wrote: > On Wed, Jun 3, 2009 at 3:50 AM, Richard Toohey > wrote: > > On 3/06/2009, at 10:02 PM, BARDOU Pierre wrote: > > > >> Hello, > >> > >> I have performance issues on a OpenBSD 4.4 firewall. > >> CPU load is OK (always below 50%), b

Re: PF performance problem

On Wed, Jun 3, 2009 at 3:50 AM, Richard Toohey wrote: > On 3/06/2009, at 10:02 PM, BARDOU Pierre wrote: > >> Hello, >> >> I have performance issues on a OpenBSD 4.4 firewall. >> CPU load is OK (always below 50%), but system load is always between 1 and >> 1.5, it may go up to 2 sometimes. >> > [cu

Re: PF performance problem

Thanks everybody for the help. I will stop worrying about the system load and wait a noticeable performance problem before asking for help :) I set pfctl -x urgent, and now I'm waiting for something in /var/log/messages... -- Cordialement, Pierre BARDOU

Re: PF performance problem

BARDOU Pierre escribis: The only problem I noticed is an abnormally long ping (usually 0.3ms, sometimes -3 or 4 times a day says nagios- up to 30ms). M... maybe it's not a PD-related issue. Check your network. Despite of that, check the ICMP rules; use tcpdumo(1) also to debug it. I am wo

Re: PF performance problem

... -- Cordialement, Pierre BARDOU -Message d'origine- De : Richard Toohey [mailto:richardtoo...@paradise.net.nz] Envoyi : mercredi 3 juin 2009 12:50 @ : BARDOU Pierre Cc : misc@openbsd.org Objet : Re: PF performance problem On 3/06/2009, at 10:02 PM, BARDOU Pierre wrote: > Hello, &g

Re: PF performance problem

On 3/06/2009, at 10:02 PM, BARDOU Pierre wrote: Hello, I have performance issues on a OpenBSD 4.4 firewall. CPU load is OK (always below 50%), but system load is always between 1 and 1.5, it may go up to 2 sometimes. [cut] And what is the actual *problem*? What is pf failing to do? Or a

Re: PF performance problem

On 12:02, Wed 03 Jun 09, BARDOU Pierre wrote: > Hello, > > I have performance issues on a OpenBSD 4.4 firewall. > CPU load is OK (always below 50%), but system load is always between 1 and > 1.5, it may go up to 2 sometimes. Is the system really slow ? Or are you basing this 'performance issue' o

Re: PF performance problem

PF works like a charm. Without doubt. Despite of that, PF don't require the HD and the main bottlenecks are de CPU and memory (and NIC and the driver, of course). I suspect an error in your PF logging system. PD. 'Urgent' means the same words says: urgent. If you see some message related to P