Re: vms & NET_MPSAFE

[Ryota Ozaki <ozaki-r%netbsd.org@localhost>]

Hi,

On Wed, Jul 20, 2016 at 4:59 AM, Scott Burns <Scott.Burns%seqent.com@localhost> wrote:
> Has anyone used multiple vmx NICs (VMWare virtual NICs on VMWare ESXI 5.5+)
> when implementing a NetBSD ipf/ipnat firewall using NET_MPSAFE?
>
> Per this article it appears to result in a performance increase:
>
>
> https://www.netbsd.org/gallery/presentations/ozaki-r/2015_AsiaBSDCon/ABC2015
> -P4C-paper.pdf
>
> but is it ready for prime time?

A kernel of -current with NET_MPSAFE can achieve similar results
of the paper. However, the results in the paper is based on Layer
2 forwarding using bridge(4) with wm(4), and you cannot gain
benefits by the improvement.

Current status and our plan for your environment:
- vmx: no difference between NET_MPSAFE on and off for now.
  We have some patches that make vmx MP-safe and will merge
  them at some time (not soon though).
- IP forwarding: MP-ification is ongoing, but not finished.
  It's hopefully finished in this year.
- ipf/ipnat: MP-ification is not planned (by us).
  I think we recommend using npf for multi-core environments.

Regards,
  ozaki-r