pf deadly slow

[Stephane D'Alu]

On 10/04/13 16:48, sven falempin wrote:
> configure ALTQ (maybe the absence of configurating is not nicely working),
> i think freebsd has virtio support ,

Yes, since 9.2 virtio drivers are included in base distribution

>  
> i am interested in the result :-)

I switched from virtio to 82545EM (with em driver), and performance are
back to normal.

Look like a bug / bad interraction between virtio and pf.
(I don't know if VirtualBox as also a part in it)

>  
>  
> OpenBSD  is currently completly rewriting the queing system
> and improving performance.
>  
>  
> 
> 
> On Fri, Oct 4, 2013 at 9:17 AM, Stephane D'Alu
> <Stephane.DAlu at insa-lyon.fr <mailto:Stephane.DAlu at insa-lyon.fr>> wrote:
> 
>     I'm running FreeBSD 9.2 inside VirtualBox with virtio for the nework
>     card. pf is compiled with ALTQ support.
> 
>     My pf.conf file is as follow, which do nearly nothing:
>      set skip on lo0
>      set skip on vnet0
> 
>     If pf is enabled, bandwith drop by a 1000 factor!
>     From 10Mb/s to 4Kb/s
> 
>     Any idea, what's going on?
> 
> 
>     PS:
>     - I have the same kind of configuration FreeBSD 9.2, pf + ALTQ
>     and real firewall rules on a non virtualized server and everything
>     is fine.
>     - I will try to remove ALTQ and use em driver instead, to see if there
>     is a performance improvement
> 
>     Sincerly
>     --
>     Stephane D'Alu -- Ingenieur Recherche
>     Laboratoire CITI / INSA-Lyon
>     Tel: +33 47243 6483 <tel:%2B33%2047243%206483>
>     _______________________________________________
>     freebsd-pf at freebsd.org <mailto:freebsd-pf at freebsd.org> mailing list
>     http://lists.freebsd.org/mailman/listinfo/freebsd-pf
>     To unsubscribe, send any mail to "freebsd-pf-unsubscribe at freebsd.org
>     <mailto:freebsd-pf-unsubscribe at freebsd.org>"
> 
> 
> 
> 
> -- 
> ---------------------------------------------------------------------------------------------------------------------
> () ascii ribbon campaign - against html e-mail 
> /\ 


-- 
Stephane D'Alu -- Ingenieur Recherche
Laboratoire CITI / INSA-Lyon
Tel: +33 47243 6483