PF from OpenBSD 4.5 available as patch for 8.1-STABLE?

[Holger Rauch]

Hi Chris,

thanks for mentioning this. Unfortunately I forgot to mention that the problem doesn't occur when both hosts are on the same subnet (i.e. no firewall in between, only HP ProCurve switches).

But I will follow your suggestion and try to disable HW checksum offloading.

Greetings,

      Holger

________________________________________
From: Chris Buechler [cbuechler at gmail.com]
Sent: Friday, November 19, 2010 19:08
To: Holger Rauch
Cc: freebsd-pf at FreeBSD.org
Subject: Re: PF from OpenBSD 4.5 available as patch for 8.1-STABLE?

On Fri, Nov 19, 2010 at 10:21 AM, Holger Rauch <Holger.Rauch at empic.de> wrote:
> Hi,
>
> is there such a patch? The reason why I ask for it is:
>
> I'm currently experiencing saturated network interfaces when using gigabit networking in conjunction with certain Linux driver<->NIC combos for Broadcom chips against the PF version shipped with FreeBSD 8.1 stable running on a HP ProLiant DL 180 G5 server.
>
> The problem only occurs with high throughputs (at least 30 MBytes/sec) caused by scp/rsync. Up to now, I've come accross this issue with
>
>  Broadcom Corporation NetLink BCM5787M Gigabit Ethernet PCI Express (rev 02) (tg3 driver in Linux)
>
> and
>
> Broadcom Corporation NetXtreme II BCM5709 Gigabit Ethernet (rev 20)
> (bnx2 driver in Linux; this is used in various HP ProLiant servers)
>
> But it doesn't occur with Intel chips and also not with this chip
>

You're trying to fix a NIC driver-related issue by messing with your
firewall, you're most likely looking in the wrong place. May have more
luck posting to freebsd-net. One thing to try is disabling hardware
checksum offloading (rxcsum, txcsum) to see if that makes any
difference, with some NICs it causes issues.

THE standard software for Aviation Authorities

**********************************************************************************************
IMPORTANT NOTICE / WICHTIGER HINWEIS
This communication contains information which is confidential and may also be privileged. It is for the 
exclusive use of the intended recipient(s). If you are not the intended recipient(s) please note that any 
distribution, copying or use of this communication or the information in it is strictly prohibited. If you have 
received this communication in error please notify us immediately by email or by telephone and then delete 
this email and any copies of it.
Diese E-Mail koennte vertrauliche und/oder rechtlich geschuetzte Informationen enthalten. Wenn Sie nicht 
der richtige Adressat sind oder diese E-Mail irrtuemlich erhalten haben, informieren Sie bitte sofort den 
Absender und vernichten Sie diese Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser 
Mail sind nicht gestattet.
**********************************************************************************************