[Bug 237072] netgraph(4): performance issue [on HardenedBSD]?

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=237072

--- Comment #11 from Phillip R. Jaenke <prj at rootwyrm.com> ---
This does surprise me somewhat as the performance is definitely NOT as expected
based on other comparative benchmarks. I think this may actually be a severe
CPU performance regression.

The processor involved is an Atom E3845 @ 1.9GHz. Using Passmark as a base for
comparison, we should expect performance to be approximately 55-60% of an Atom
C2758 SoC, within margin of error on AMD GX-412HC (PCEngines APU2 w/i210,) and
approximately 3x faster (minimum) than an AMD G-T40E (PCEngines APU1
w/Realtek.) This should reasonably apply to both forwarding and firewalling
throughput.

Looking at BSDRP's results to establish reasonable expectations, what we
instead see is the E3845 managing a peak throughput rate roughly comparable to
the AMD G-T40E. Missing the expected mark by 40% or more.
Whereas switching to the i3-7100U (slightly faster than the C2758) results in a
GREATER than 100% immediate performance gain (likely quantifiable as more than
150% total.) 

Based on that, I think this might actually be exposing some flavor of
regression. Independent benchmarks of various E3845 appliances running 11.2 put
the expected numbers for firewalling NAT at 800-900Mbps with no tuning (and
encrypted traffic at a whole 300Mbps best case with the CPU completely pegged.)
What was observed was 500-600Mbps with <50% total CPU utilization. It would
seem to me that outside of a regression, one of those numbers (either, really)
should be higher.

-- 
You are receiving this mail because:
You are the assignee for the bug.