6 ms·
What problem does pf have after 1Gbit/s?
by jrcii 11y ago
What problem does pf have after 1Gbit/s?
- chrissnell 11y agoBack in the day, it was the limitations of PF under SMP. I don't think that's been an issue for a few years now, though.
- justincormack 11y agoYou don't need SMP for much work up to 10Gb/s on modern hardware. Not sure if OpenBSD has 10Gb driver support or not (although FreeBSD and NetBSD do).
- 4ad 11y agoOf course OpenBSD has 10GbE.
- feld 11y agoBut which? Mellanox, Intel, Solarflare, QLogic?
- 4ad 11y agohttp://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/pci.4?query=pci&sec=4&arch=amd64 http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/...
- feld 11y agoI have no idea which driver names are 10gbit and I certainly don't go to a store and ask for hardware by its device ID or chip family name.
- 4ad 11y agoPerhaps if you actually read the driver description, or who knows, searched the web page you would have found the answer to your question.
- chrissnell 11y agoCome on, amigo. Click the link, Ctrl-F for "10Gb", then click the links. The man pages even include the actual manufacturer part number that they've tested. What more could you need?
- chrissnell 11y agoYou don't today but back in 2007, we did. We we running 600-700 Mbps through a fairly complex PF ruleset on a Sun x86 server with Intel NICs on OpenBSD 3.9 and we were beginning to run up against a CPU wall. I'm sure things are significantly better today with modern NICs and 5.8.
- pyvpx 11y agopf itself, doesn't. depending on your CPU you can go far and above 1Gbps even with the tiniest of packets.
- zdw 11y agoApparently not many now, I haven't had the opportunity to test it with >1Gbit/s equipment. But for people who need network filtering at those bandwidths, usually there are other solutions that perform better on equal hardware. This should get better soon as there's a lot of work being done in OpenBSD to make at least some parts of the network stack SMP capable.