Thanks, Thats really helpful! Do you mean the SP kernel? I found the SP kernel performed worse than the MP kernel in production.
I also do have debug turned on.. Ok, I shall remove cal...org from our OBSD boxes and from my memory ;) Thanks for the advice, I will do anything I can to stay with OBSD :) Humbly yours, Andy. On Wed, 15 May 2013 12:01:08 +0200, Peter Hessler <[email protected]> wrote: > On 2013 May 15 (Wed) at 10:29:24 +0100 (+0100), andy wrote: > :I run 12 OpenBSD firewalls, and I have an issue on my highest throughput > :boxes. I have HP DL160 G6 boxes with Intel ET2 4 port NIC's. > :I have a problem where I cannot run traffic any faster than ~700Mbit as I > :am hitting 100% utilisation on the first core due to the giant big lock > :trying to process the MSI interrupts. > > For performance, you can try running the UP kernel, or upgrading the > underlying server. For firewall performance, the memory speed is one of > the most important aspects. Single CPU GHz, QPI, etc, etc. > > Make sure to disable pool_debug: kern.pool_debug=0 > > From memory, the performance you are describing is around the maximum > that a DL160 can handle. The DL360s will give you far better pps > performance. > > As you have seen, there is some work being done to improve the speed of > network processing, but this is taking some time.

