Re: soekris 5501

[Louis Guillaume <lguillaume%berklee.edu@localhost>]

Thor Lancelot Simon wrote:
> On Thu, May 22, 2008 at 11:38:48AM -0400, Louis Guillaume wrote:
> > Hi,
> >
> > I'm wondering if anyone has successfully used the Soekris net5501 with 
> > NetBSD.
> >
> > My 4501/ipfilter firewall caps the traffic through my 20 meg Internet 
> > service at ~12Mb/s apparently due to the processor speed. So I believe I 
> > need to upgrade.
>
> It seems unlikely to me.  The 4501 can forward IP between interfaces at
> 30-40Mbit/sec.

Even with NAT? and a few rdr rules? ftp proxy? Maybe ipfilter is the 
bottleneck, but I haven't been able to successfully convert to pf: 
http://mail-index.netbsd.org/netbsd-users/2008/02/08/msg000191.html


It might also be worth noting that I'm running net-booted. The swap is 
nfs-shared.

But the system never appears to run out of memory, nor does iostat show 
any nfs activity during an ftp transfer through the firewall to an 
internal machine.

But during the same transfer, the CPU gets pegged...

This file transfer goes through the firewall to an internal machine...

ftp> put BookEm.tgz
local: BookEm.tgz remote: BookEm.tgz
229 Entering Extended Passive Mode (|||15014|)
150 Opening BINARY mode data connection for 'BookEm.tgz'.
100% |*******************************************************| 13919 KiB 
   1.06 MiB/s    00:00 ETA
226 Transfer complete.
14253910 bytes sent in 00:12 (1.06 MiB/s)
ftp>


This is iostat during the same transfer...

# iostat -C 2 20
            CPU
 us ni sy in id
  0  0  0  1 99
  0  0  0  1 99
  0  0  0 16 84
  0  0  0 95  5
  0  0  0 97  3
  0  0  0 97  3
  0  0  0 94  6
  0  0  0 94  6
  0  0  0 77 23
  0  0  0  0 100
  0  0  0  0 100
  0  0  0  0 100
  0  0  0  0 100
  0  0  0  0 100
  0  0  0  0 100
  0  0  0  0 100
  0  0  0  0 100
  0  0  0  0 100
  0  0  0  1 99
  0  0  0  0 100

Thanks for looking,

Louis