Re: pf.conf optimization for NTP pool traffic

2025-01-13 Thread Maurice Janssen
On Wed, Dec 18, 2024 at 11:51:26AM +1000, David Gwynne wrote: >if you're feeling brave you can try the diff i sent to the 'PPPoE >passthrough with "GigaHub" is very slow' thread on misc@ a week or so >ago which skips the queue for pppoe data packets. It took a while, but yesterday I installed a sn

Re: pf.conf optimization for NTP pool traffic

2025-01-02 Thread Maurice Janssen
On Thu, Jan 02, 2025 at 04:17:23PM +1000, David Gwynne wrote: >On Thu, Dec 19, 2024 at 10:48:41PM +0100, Maurice Janssen wrote: >> On Thu, Dec 19, 2024 at 09:40:20AM +1000, David Gwynne wrote: >> > >> >> On 19 Dec 2024, at 08:20, David Gwynne wrote: >> >> >> >>> On 19 Dec 2024, at 02:17, Maurice

Re: pf.conf optimization for NTP pool traffic

2025-01-01 Thread David Gwynne
On Thu, Dec 19, 2024 at 10:48:41PM +0100, Maurice Janssen wrote: > On Thu, Dec 19, 2024 at 09:40:20AM +1000, David Gwynne wrote: > > > >> On 19 Dec 2024, at 08:20, David Gwynne wrote: > >> > >>> On 19 Dec 2024, at 02:17, Maurice Janssen wrote: > >>> kstat(1) shows me that there are (nearly) no e

Re: pf.conf optimization for NTP pool traffic

2024-12-29 Thread Maurice Janssen
On Sat, Dec 28, 2024 at 08:18:29PM +0200, Kapetanakis Giannis wrote: >On 19/12/2024 23:53, Maurice Janssen wrote: >> On Thu, Dec 19, 2024 at 01:39:23PM +0200, Kapetanakis Giannis wrote: >> > On 18/12/2024 18:22, Maurice Janssen wrote: >> > > I moved the rules for the NTP traffic to the top and this

Re: pf.conf optimization for NTP pool traffic

2024-12-28 Thread Kapetanakis Giannis
On 19/12/2024 23:53, Maurice Janssen wrote: On Thu, Dec 19, 2024 at 01:39:23PM +0200, Kapetanakis Giannis wrote: On 18/12/2024 18:22, Maurice Janssen wrote: I moved the rules for the NTP traffic to the top and this seems to improve things. But I'll leave it overnight to have some better stats

Re: pf.conf optimization for NTP pool traffic

2024-12-19 Thread Maurice Janssen
On Thu, Dec 19, 2024 at 01:39:23PM +0200, Kapetanakis Giannis wrote: >On 18/12/2024 18:22, Maurice Janssen wrote: >> I moved the rules for the NTP traffic to the top and this seems to improve >> things. But I'll leave it overnight to have some better stats in the >> morning. >> >> Best regards, >>

Re: pf.conf optimization for NTP pool traffic

2024-12-19 Thread Maurice Janssen
On Thu, Dec 19, 2024 at 09:40:20AM +1000, David Gwynne wrote: > >> On 19 Dec 2024, at 08:20, David Gwynne wrote: >> >>> On 19 Dec 2024, at 02:17, Maurice Janssen wrote: >>> kstat(1) shows me that there are (nearly) no errors on the rx side, but >>> showed about 470k dropped packets (qdrops) on t

Re: pf.conf optimization for NTP pool traffic

2024-12-19 Thread Kapetanakis Giannis
On 18/12/2024 18:22, Maurice Janssen wrote: > I moved the rules for the NTP traffic to the top and this seems to improve > things. But I'll leave it overnight to have some better stats in the > morning. > > Best regards, > Maurice Jumping in since I've also recently added an ntp server in ntppool

Re: pf.conf optimization for NTP pool traffic

2024-12-18 Thread David Gwynne
> On 19 Dec 2024, at 08:20, David Gwynne wrote: > > > >> On 19 Dec 2024, at 02:17, Maurice Janssen wrote: >> >> On Wed, Dec 18, 2024 at 11:51:26AM +1000, David Gwynne wrote: >>> Hey Maurice, >>> >>> bluhm@ just did a talk at eurobsdcon that might help you understand the >>> different poin

Re: pf.conf optimization for NTP pool traffic

2024-12-18 Thread David Gwynne
> On 19 Dec 2024, at 02:17, Maurice Janssen wrote: > > On Wed, Dec 18, 2024 at 11:51:26AM +1000, David Gwynne wrote: >> Hey Maurice, >> >> bluhm@ just did a talk at eurobsdcon that might help you understand the >> different points to look at. my tldr version is if packets are being >> dropped

Re: pf.conf optimization for NTP pool traffic

2024-12-18 Thread Maurice Janssen
On Wed, Dec 18, 2024 at 11:21:44AM -, Stuart Henderson wrote: >On 2024-12-18, Janne Johansson wrote: >>> I have an NTP server behind an OpenBSD firewall / router and seeing some >>> packet loss. The NTP server (Leontp 1200) should be able to handle the >>> load easily, so I suspect the packet

Re: pf.conf optimization for NTP pool traffic

2024-12-18 Thread Maurice Janssen
On Wed, Dec 18, 2024 at 11:51:26AM +1000, David Gwynne wrote: >Hey Maurice, > >bluhm@ just did a talk at eurobsdcon that might help you understand the >different points to look at. my tldr version is if packets are being >dropped on the firewall it will be somewhere in the receive path. my >experie

Re: pf.conf optimization for NTP pool traffic

2024-12-18 Thread Stuart Henderson
On 2024-12-18, Janne Johansson wrote: >> I have an NTP server behind an OpenBSD firewall / router and seeing some >> packet loss. The NTP server (Leontp 1200) should be able to handle the >> load easily, so I suspect the packet loss occurs at the firewall/router >> or elsewhere. >> My first suspe

Re: pf.conf optimization for NTP pool traffic

2024-12-18 Thread Janne Johansson
> I have an NTP server behind an OpenBSD firewall / router and seeing some > packet loss. The NTP server (Leontp 1200) should be able to handle the > load easily, so I suspect the packet loss occurs at the firewall/router > or elsewhere. > My first suspect was the state table on the firewall/route

Re: pf.conf optimization for NTP pool traffic

2024-12-17 Thread David Gwynne
On Tue, Dec 17, 2024 at 06:31:36PM +0100, Maurice Janssen wrote: > Hi, > > I have an NTP server behind an OpenBSD firewall / router and seeing some > packet loss.?? The NTP server (Leontp 1200) should be able to handle the > load easily, so I suspect the packet loss occurs at the firewall/router o