Hi misc@
I recently introduced an OpenBSD firewall inline and noticed a
reduction in overall download speeds. I am trying to understand why
this may be so. The firewall is Ubiquiti ERL running 6.7 release.
Internet connection is Comcast xfinity via cable modem, plan 200
Mbits/s down and 10 Mbits/s up. Details follow:
1. config #1: MacBook - Linksys WRT1200AC - xfinity cable modem
(speed: ~210 Mbits/s down, 6 Mbits/s up)
2. config #2: MacBook - Linksys WRT1200AC - Ubiquiti ERL - xfinity
cable modem (speed: ~90 MBits down, 6 Mbits/s up)
3. config #3 (Line speed): MacBook wired to cable modem (~230 Mbits/s
down, ~8 Mbits/s up).
Linksys is running latest OpenWrt, and speed tests were run on MacBook
connected wired to Linksys. It was difficult to try tcpbench since the
setup was cumbersome, and iperf3 public servers end up being busy more
often than not (and threads on misc@ indicated iperf3 wasn't as
reliable either). Test numbers come from speedtest.net and
speed.cloudflare.com. While I realize this speed test is hardly
accurate, I have tried to maintain the same configuration (no ERL and
inline ERL) to obtain relative numbers.
I am trying to understand the reduction from 210 Mbits/s down to 90
Mbits/s down between config #1 and config #2 above. The slowdown is
not noticeable to family, so this is more of my intellectual curiosity
than screams over a buffering video! :-)
Relevant system information (dmesg, etc.) below. All sysctl values
attached as sysctl.txt I gathered it by reading similar threads on
misc@. If I missed anything, please let me know. Thanks in advance.
-Amarendra
dmesg:
Copyright (c) 1982, 1986, 1989, 1991, 1993
The Regents of the University of California. All rights reserved.
Copyright (c) 1995-2020 OpenBSD. All rights reserved. https://www.OpenBSD.org
OpenBSD 6.7 (GENERIC.MP) #134: Thu May 7 16:05:06 MDT 2020
[email protected]:/usr/src/sys/arch/octeon/compile/GENERIC.MP
real mem = 536870912 (512MB)
avail mem = 506740736 (483MB)
mainbus0 at root: board 20002 rev 2.18
cpu0 at mainbus0: CN50xx CPU rev 0.1 500 MHz, Software FP emulation
cpu0: cache L1-I 32KB 4 way D 16KB 64 way, L2 128KB 8 way
cpu1 at mainbus0: CN50xx CPU rev 0.1 500 MHz, Software FP emulation
cpu1: cache L1-I 32KB 4 way D 16KB 64 way, L2 128KB 8 way
clock0 at mainbus0: int 5
octcrypto0 at mainbus0
iobus0 at mainbus0
simplebus0 at iobus0: "soc"
octciu0 at simplebus0
octsmi0 at simplebus0
octpip0 at simplebus0
octgmx0 at octpip0 interface 0
cnmac0 at octgmx0: RGMII, address 78:8a:20:46:a8:c0
atphy0 at cnmac0 phy 7: AR8035 10/100/1000 PHY, rev. 2
cnmac1 at octgmx0: RGMII, address 78:8a:20:46:a8:c1
atphy1 at cnmac1 phy 6: AR8035 10/100/1000 PHY, rev. 2
cnmac2 at octgmx0: RGMII, address 78:8a:20:46:a8:c2
atphy2 at cnmac2 phy 5: AR8035 10/100/1000 PHY, rev. 2
com0 at simplebus0: ns16550a, 64 byte fifo
com0: console
dwctwo0 at iobus0 base 0x1180068000000 irq 56
usb0 at dwctwo0: USB revision 2.0
uhub0 at usb0 configuration 1 interface 0 "Octeon DWC2 root hub" rev
2.00/1.00 addr 1
octrng0 at iobus0 base 0x1400000000000 irq 0
/dev/ksyms: Symbol table not valid.
umass0 at uhub0 port 1 configuration 1 interface 0 "Lexar USB Flash
Drive" rev 2.10/11.00 addr 2
umass0: using SCSI over Bulk-Only
scsibus0 at umass0: 2 targets, initiator 0
sd0 at scsibus0 targ 1 lun 0: <Lexar, USB Flash Drive, 1100> removable
serial.21c40cd1719080003000
sd0: 30526MB, 512 bytes/sector, 62517248 sectors
vscsi0 at root
scsibus1 at vscsi0: 256 targets
softraid0 at root
scsibus2 at softraid0: 256 targets
boot device: sd0
root on sd0a (2124441bc835a462.a) swap on sd0b dump on sd0b
WARNING: No TOD clock, believing file system.
WARNING: CHECK AND RESET THE DATE!
pftcl -s:
match in all scrub (no-df random-id max-mss 1440)
block drop in quick on ! cnmac0 inet from xx.xx.xx.xx/23 to any
block drop in quick inet from xx.xx.xx.xx to any
block drop all
pass out quick on egress inet from (vether0:network) to any flags S/SA
nat-to (egress) round-robin
pass out quick inet all flags S/SA
pass in on vether0 inet all flags S/SA
pass in on cnmac1 inet all flags S/SA
pass in on cnmac2 inet all flags S/SA
pfctl -si:
Status: Enabled for 3 days 18:14:11 Debug: err
Interface Stats for egress IPv4 IPv6
Bytes In 64537867779 0
Bytes Out 7005140381 0
Packets In
Passed 56024370 0
Blocked 43050 0
Packets Out
Passed 22271061 0
Blocked 0 0
State Table Total Rate
current entries 847
half-open tcp 23
searches 158989755 489.4/s
inserts 1095307 3.4/s
removals 1094460 3.4/s
Counters
match 1343178 4.1/s
bad-offset 0 0.0/s
fragment 0 0.0/s
short 1 0.0/s
normalize 0 0.0/s
memory 0 0.0/s
bad-timestamp 0 0.0/s
congestion 41 0.0/s
ip-option 26164 0.1/s
proto-cksum 0 0.0/s
state-mismatch 10758 0.0/s
state-insert 0 0.0/s
state-limit 0 0.0/s
src-limit 0 0.0/s
synproxy 0 0.0/s
translate 0 0.0/s
no-route 0 0.0/s
pfctl -s memory:
states hard limit 100000
src-nodes hard limit 10000
frags hard limit 16384
tables hard limit 1000
table-entries hard limit 200000
pktdelay-pkts hard limit 10000
The netlivlocks value keeps on increasing regularly:
kern.netlivelocks=57911
netstat -m:
1009 mbufs in use:
917 mbufs allocated to data
5 mbufs allocated to packet headers
87 mbufs allocated to socket names and addresses
801/7256 mbuf 2048 byte clusters in use (current/peak)
0/15 mbuf 2112 byte clusters in use (current/peak)
0/24 mbuf 4096 byte clusters in use (current/peak)
0/8 mbuf 8192 byte clusters in use (current/peak)
0/0 mbuf 9216 byte clusters in use (current/peak)
0/0 mbuf 12288 byte clusters in use (current/peak)
0/0 mbuf 16384 byte clusters in use (current/peak)
0/8 mbuf 65536 byte clusters in use (current/peak)
6512/17088/131072 Kbytes allocated to network (current/peak/max)
0 requests for memory denied
0 requests for memory delayed
0 calls to protocol drain routines
netstat -i:
Name Mtu Network Address Ipkts Ifail Opkts Ofail Colls
lo0 32768 <Link> 198 0 198 0 0
lo0 32768 localhost/1 localhost 198 0 198 0 0
lo0 32768 fe80::%lo0/ fe80::1%lo0 198 0 198 0 0
lo0 32768 127/8 localhost 198 0 198 0 0
cnmac0 1600 <Link> a8:28:dc:cc:2e:6f 56088774 0 22283491 2688 0
cnmac0 1600 73.231.60/2 c-73-231-60-128.h 56088774 0 22283491 2688 0
cnmac1 1600 <Link> 78:8a:20:46:a8:c1 23646497 4 56569853 48 0
cnmac2 1600 <Link> 78:8a:20:46:a8:c2 14823 0 226198 226198 0
enc0* 0 <Link> 0 0 0 0 0
bridge0 1500 <Link> 23187238 0 57022219 0 0
vether0 32768 <Link> fe:e1:ba:d0:c8:a9 23056709 0 56795991 0 0
vether0 32768 192.168.10/ 192.168.10.1 23056709 0 56795991 0 0
pflog0 33136 <Link> 0 0 26171 0 0
kern.ostype=OpenBSD
kern.osrelease=6.7
kern.osrevision=202005
kern.version=OpenBSD 6.7 (GENERIC.MP) #134: Thu May 7 16:05:06 MDT 2020
[email protected]:/usr/src/sys/arch/octeon/compile/GENERIC.MP
kern.maxvnodes=14901
kern.maxproc=542
kern.maxfiles=2950
kern.argmax=524288
kern.securelevel=1
kern.hostname=spike.lan
kern.hostid=0
kern.clockrate=tick = 10000, tickadj = 40, hz = 100, profhz = 100, stathz = 100
kern.posix1version=200809
kern.ngroups=16
kern.job_control=1
kern.saved_ids=1
kern.boottime=Wed Sep 30 19:56:41 2020
kern.domainname=
kern.maxpartitions=16
kern.rawpartition=2
kern.maxthread=798
kern.nthreads=51
kern.osversion=GENERIC.MP#134
kern.somaxconn=128
kern.sominconn=80
kern.nosuidcoredump=1
kern.fsync=1
kern.sysvmsg=1
kern.sysvsem=1
kern.sysvshm=1
kern.msgbufsize=16336
kern.malloc.buckets=16,32,64,128,256,512,1024,2048,4096,8192,16384,32768,65536,131072,262144,524288
kern.malloc.bucket.16=(calls = 8448 total_allocated = 1024 total_free = 753
elements = 1024 high watermark = 5120 could_free = 0)
kern.malloc.bucket.32=(calls = 15552 total_allocated = 512 total_free = 308
elements = 512 high watermark = 2560 could_free = 0)
kern.malloc.bucket.64=(calls = 18806 total_allocated = 1536 total_free = 173
elements = 256 high watermark = 1280 could_free = 7)
kern.malloc.bucket.128=(calls = 5889 total_allocated = 128 total_free = 17
elements = 128 high watermark = 640 could_free = 0)
kern.malloc.bucket.256=(calls = 11923 total_allocated = 128 total_free = 56
elements = 64 high watermark = 320 could_free = 0)
kern.malloc.bucket.512=(calls = 9331 total_allocated = 128 total_free = 33
elements = 32 high watermark = 160 could_free = 0)
kern.malloc.bucket.1024=(calls = 3587 total_allocated = 48 total_free = 15
elements = 16 high watermark = 80 could_free = 0)
kern.malloc.bucket.2048=(calls = 127 total_allocated = 56 total_free = 8
elements = 8 high watermark = 40 could_free = 0)
kern.malloc.bucket.4096=(calls = 102 total_allocated = 8 total_free = 2
elements = 4 high watermark = 20 could_free = 0)
kern.malloc.bucket.8192=(calls = 1050 total_allocated = 26 total_free = 1
elements = 2 high watermark = 10 could_free = 0)
kern.malloc.bucket.16384=(calls = 7764 total_allocated = 9 total_free = 2
elements = 1 high watermark = 5 could_free = 0)
kern.malloc.bucket.32768=(calls = 7 total_allocated = 6 total_free = 0 elements
= 1 high watermark = 5 could_free = 0)
kern.malloc.bucket.65536=(calls = 12311 total_allocated = 1 total_free = 0
elements = 1 high watermark = 5 could_free = 0)
kern.malloc.bucket.131072=(calls = 0 total_allocated = 0 total_free = 0
elements = 1 high watermark = 5 could_free = 0)
kern.malloc.bucket.262144=(calls = 0 total_allocated = 0 total_free = 0
elements = 1 high watermark = 5 could_free = 0)
kern.malloc.bucket.524288=(calls = 0 total_allocated = 0 total_free = 0
elements = 1 high watermark = 5 could_free = 0)
kern.malloc.kmemnames=free,,devbuf,,pcb,rtable,,,,ifaddr,soopts,sysctl,counters,,ioctlops,,,,,iov,mount,,NFS_req,NFS_mount,,vnodes,namecache,UFS_quota,UFS_mount,shm,VM_map,sem,dirhash,ACPI,VM_pmap,,,,file,file_desc,sigio,proc,subproc,VFS_cluster,,,MFS_node,,,Export_Host,NFS_srvsock,,NFS_daemon,ip_moptions,in_multi,ether_multi,mrt,ISOFS_mount,ISOFS_node,MSDOSFS_mount,MSDOSFS_fat,MSDOSFS_node,ttys,exec,miscfs_mount,fusefs_mount,,,,,,,,,pfkey_data,tdb,xform_data,,pagedep,inodedep,newblk,,,indirdep,,,,,,,,,VM_swap,,,,,,UVM_amap,UVM_aobj,,USB,USB_device,USB_HC,witness,memdesc,,,crypto_data,,IPsec_creds,,,,emuldata,,,,,,,,,ip6_options,NDP,,,temp,NTFS_mount,NTFS_node,NTFS_fnode,NTFS_dir,NTFS_hash,NTFS_attr,NTFS_data,NTFS_decomp,NTFS_vrun,kqueue,,SYN_cache,UDF_mount,UDF_file_entry,UDF_file_id,,AGP_Memory,DRM
kern.malloc.kmemstat.free=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0,
maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.devbuf=(inuse = 197, calls = 1097, memuse = 325K,
limblocks = 0, maxused = 325K, limit = 78644K, spare = 0, sizes =
(16,32,64,128,256,512,1024,2048,4096,8192,16384,32768,65536))
kern.malloc.kmemstat.pcb=(inuse = 14, calls = 16, memuse = 9K, limblocks = 0,
maxused = 9K, limit = 78644K, spare = 0, sizes = (16,32,1024))
kern.malloc.kmemstat.rtable=(inuse = 105, calls = 722, memuse = 6K, limblocks =
0, maxused = 6K, limit = 78644K, spare = 0, sizes = (16,32,64,128,256))
kern.malloc.kmemstat.ifaddr=(inuse = 74, calls = 77, memuse = 13K, limblocks =
0, maxused = 13K, limit = 78644K, spare = 0, sizes = (32,64,128,256,4096))
kern.malloc.kmemstat.soopts=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0,
maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.sysctl=(inuse = 3, calls = 3, memuse = 2K, limblocks = 0,
maxused = 2K, limit = 78644K, spare = 0, sizes = (32,128,1024))
kern.malloc.kmemstat.counters=(inuse = 39, calls = 39, memuse = 34K, limblocks
= 0, maxused = 34K, limit = 78644K, spare = 0, sizes =
(128,256,512,1024,4096,8192))
kern.malloc.kmemstat.ioctlops=(inuse = 0, calls = 7445, memuse = 0K, limblocks
= 0, maxused = 4K, limit = 78644K, spare = 0, sizes = (256,512,1024,2048,4096))
kern.malloc.kmemstat.iov=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0,
maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.mount=(inuse = 9, calls = 9, memuse = 9K, limblocks = 0,
maxused = 9K, limit = 78644K, spare = 0, sizes = (1024))
kern.malloc.kmemstat.NFS_req=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0,
maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.NFS_mount=(inuse = 0, calls = 0, memuse = 0K, limblocks =
0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.vnodes=(inuse = 1204, calls = 7084, memuse = 76K,
limblocks = 0, maxused = 76K, limit = 78644K, spare = 0, sizes = (64,128,256))
kern.malloc.kmemstat.namecache=(inuse = 0, calls = 0, memuse = 0K, limblocks =
0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.UFS_quota=(inuse = 1, calls = 1, memuse = 16K, limblocks =
0, maxused = 16K, limit = 78644K, spare = 0, sizes = (16384))
kern.malloc.kmemstat.UFS_mount=(inuse = 37, calls = 37, memuse = 57K, limblocks
= 0, maxused = 57K, limit = 78644K, spare = 0, sizes =
(16,32,64,512,2048,16384))
kern.malloc.kmemstat.shm=(inuse = 2, calls = 2, memuse = 2K, limblocks = 0,
maxused = 2K, limit = 78644K, spare = 0, sizes = (256,1024))
kern.malloc.kmemstat.VM_map=(inuse = 2, calls = 2, memuse = 1K, limblocks = 0,
maxused = 1K, limit = 78644K, spare = 0, sizes = (256))
kern.malloc.kmemstat.sem=(inuse = 2, calls = 2, memuse = 1K, limblocks = 0,
maxused = 1K, limit = 78644K, spare = 0, sizes = (32,128))
kern.malloc.kmemstat.dirhash=(inuse = 147, calls = 174, memuse = 30K, limblocks
= 0, maxused = 30K, limit = 78644K, spare = 0, sizes = (16,32,64,128,256,512))
kern.malloc.kmemstat.ACPI=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0,
maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.VM_pmap=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0,
maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.file=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0,
maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.file_desc=(inuse = 2, calls = 3, memuse = 2K, limblocks =
0, maxused = 2K, limit = 78644K, spare = 0, sizes = (512,1024))
kern.malloc.kmemstat.sigio=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0,
maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.proc=(inuse = 110, calls = 3422, memuse = 67K, limblocks =
0, maxused = 76K, limit = 78644K, spare = 0, sizes = (16,32,64,512,2048,8192))
kern.malloc.kmemstat.subproc=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0,
maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.VFS_cluster=(inuse = 0, calls = 0, memuse = 0K, limblocks
= 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.MFS_node=(inuse = 0, calls = 0, memuse = 0K, limblocks =
0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.Export_Host=(inuse = 0, calls = 0, memuse = 0K, limblocks
= 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.NFS_srvsock=(inuse = 1, calls = 1, memuse = 1K, limblocks
= 0, maxused = 1K, limit = 78644K, spare = 0, sizes = (128))
kern.malloc.kmemstat.NFS_daemon=(inuse = 1, calls = 1, memuse = 16K, limblocks
= 0, maxused = 16K, limit = 78644K, spare = 0, sizes = (16384))
kern.malloc.kmemstat.ip_moptions=(inuse = 0, calls = 0, memuse = 0K, limblocks
= 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.in_multi=(inuse = 12, calls = 15, memuse = 1K, limblocks =
0, maxused = 1K, limit = 78644K, spare = 0, sizes = (32,64,128))
kern.malloc.kmemstat.ether_multi=(inuse = 1, calls = 4, memuse = 1K, limblocks
= 0, maxused = 1K, limit = 78644K, spare = 0, sizes = (32))
kern.malloc.kmemstat.mrt=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0,
maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.ISOFS_mount=(inuse = 1, calls = 1, memuse = 16K, limblocks
= 0, maxused = 16K, limit = 78644K, spare = 0, sizes = (16384))
kern.malloc.kmemstat.ISOFS_node=(inuse = 0, calls = 0, memuse = 0K, limblocks =
0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.MSDOSFS_mount=(inuse = 1, calls = 1, memuse = 8K,
limblocks = 0, maxused = 8K, limit = 78644K, spare = 0, sizes = (8192))
kern.malloc.kmemstat.MSDOSFS_fat=(inuse = 0, calls = 0, memuse = 0K, limblocks
= 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.MSDOSFS_node=(inuse = 0, calls = 0, memuse = 0K, limblocks
= 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.ttys=(inuse = 19, calls = 19, memuse = 96K, limblocks = 0,
maxused = 96K, limit = 78644K, spare = 0, sizes = (512,1024,8192,16384))
kern.malloc.kmemstat.exec=(inuse = 0, calls = 4103, memuse = 0K, limblocks = 0,
maxused = 2K, limit = 78644K, spare = 0, sizes = (16,32,256,1024))
kern.malloc.kmemstat.miscfs_mount=(inuse = 0, calls = 0, memuse = 0K, limblocks
= 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.fusefs_mount=(inuse = 0, calls = 0, memuse = 0K, limblocks
= 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.pfkey_data=(inuse = 0, calls = 0, memuse = 0K, limblocks =
0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.tdb=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0,
maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.xform_data=(inuse = 0, calls = 0, memuse = 0K, limblocks =
0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.pagedep=(inuse = 1, calls = 1, memuse = 4K, limblocks = 0,
maxused = 4K, limit = 78644K, spare = 0, sizes = (4096))
kern.malloc.kmemstat.inodedep=(inuse = 1, calls = 1, memuse = 16K, limblocks =
0, maxused = 16K, limit = 78644K, spare = 0, sizes = (16384))
kern.malloc.kmemstat.newblk=(inuse = 1, calls = 1, memuse = 1K, limblocks = 0,
maxused = 1K, limit = 78644K, spare = 0, sizes = (512))
kern.malloc.kmemstat.indirdep=(inuse = 0, calls = 0, memuse = 0K, limblocks =
0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.VM_swap=(inuse = 7, calls = 7, memuse = 19K, limblocks =
0, maxused = 19K, limit = 78644K, spare = 0, sizes = (16,64,2048,8192))
kern.malloc.kmemstat.UVM_amap=(inuse = 149, calls = 18512, memuse = 6K,
limblocks = 0, maxused = 9K, limit = 78644K, spare = 0, sizes =
(16,32,64,128,256,512,1024,2048))
kern.malloc.kmemstat.UVM_aobj=(inuse = 2, calls = 2, memuse = 3K, limblocks =
0, maxused = 3K, limit = 78644K, spare = 0, sizes = (16,2048))
kern.malloc.kmemstat.USB=(inuse = 25, calls = 28, memuse = 7K, limblocks = 0,
maxused = 7K, limit = 78644K, spare = 0, sizes = (16,32,64,128,256,2048))
kern.malloc.kmemstat.USB_device=(inuse = 4, calls = 4, memuse = 1K, limblocks =
0, maxused = 1K, limit = 78644K, spare = 0, sizes = (16,32,64))
kern.malloc.kmemstat.USB_HC=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0,
maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.witness=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0,
maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.memdesc=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0,
maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.crypto_data=(inuse = 1, calls = 1, memuse = 1K, limblocks
= 0, maxused = 1K, limit = 78644K, spare = 0, sizes = (1024))
kern.malloc.kmemstat.IPsec_creds=(inuse = 0, calls = 0, memuse = 0K, limblocks
= 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.emuldata=(inuse = 0, calls = 0, memuse = 0K, limblocks =
0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.ip6_options=(inuse = 0, calls = 0, memuse = 0K, limblocks
= 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.NDP=(inuse = 8, calls = 8, memuse = 1K, limblocks = 0,
maxused = 1K, limit = 78644K, spare = 0, sizes = (32))
kern.malloc.kmemstat.temp=(inuse = 38, calls = 52031, memuse = 4K, limblocks =
0, maxused = 84K, limit = 78644K, spare = 0, sizes =
(16,32,64,128,512,1024,2048,4096,8192,16384,65536))
kern.malloc.kmemstat.NTFS_mount=(inuse = 0, calls = 0, memuse = 0K, limblocks =
0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.NTFS_node=(inuse = 0, calls = 0, memuse = 0K, limblocks =
0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.NTFS_fnode=(inuse = 0, calls = 0, memuse = 0K, limblocks =
0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.NTFS_dir=(inuse = 0, calls = 0, memuse = 0K, limblocks =
0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.NTFS_hash=(inuse = 0, calls = 0, memuse = 0K, limblocks =
0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.NTFS_attr=(inuse = 0, calls = 0, memuse = 0K, limblocks =
0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.NTFS_data=(inuse = 0, calls = 0, memuse = 0K, limblocks =
0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.NTFS_decomp=(inuse = 0, calls = 0, memuse = 0K, limblocks
= 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.NTFS_vrun=(inuse = 0, calls = 0, memuse = 0K, limblocks =
0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.kqueue=(inuse = 19, calls = 19, memuse = 28K, limblocks =
0, maxused = 28K, limit = 78644K, spare = 0, sizes = (512,2048))
kern.malloc.kmemstat.SYN_cache=(inuse = 2, calls = 2, memuse = 16K, limblocks =
0, maxused = 16K, limit = 78644K, spare = 0, sizes = (8192))
kern.malloc.kmemstat.UDF_mount=(inuse = 0, calls = 0, memuse = 0K, limblocks =
0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.UDF_file_entry=(inuse = 0, calls = 0, memuse = 0K,
limblocks = 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.UDF_file_id=(inuse = 0, calls = 0, memuse = 0K, limblocks
= 0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.AGP_Memory=(inuse = 0, calls = 0, memuse = 0K, limblocks =
0, maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.malloc.kmemstat.DRM=(inuse = 0, calls = 0, memuse = 0K, limblocks = 0,
maxused = 0K, limit = 78644K, spare = 0, sizes = (none))
kern.cp_time=37719,90,471182,17159,0,31963068
kern.nchstats.good_hits=1284754
kern.nchstats.negative_hits=34521
kern.nchstats.bad_hits=1668
kern.nchstats.false_hits=1
kern.nchstats.misses=165212
kern.nchstats.long_names=1541
kern.nchstats.pass2=12845
kern.nchstats.2passes=13618
kern.nchstats.ncs_revhits=330
kern.nchstats.ncs_revmiss=3
kern.nchstats.ncs_dothits=0
kern.nchstats.nch_dotdothits=0
kern.forkstat.forks=5282
kern.forkstat.vforks=23
kern.forkstat.tforks=0
kern.forkstat.kthreads=18
kern.forkstat.fork_pages=61817
kern.forkstat.vfork_pages=184
kern.forkstat.tfork_pages=0
kern.forkstat.kthread_pages=0
kern.nselcoll=0
kern.tty.tk_nin=1896
kern.tty.tk_nout=132186
kern.tty.tk_rawcc=1801
kern.tty.tk_cancc=95
kern.ccpu=1948
kern.fscale=2048
kern.nprocs=51
kern.stackgap_random=262144
kern.allowkmem=0
kern.splassert=1
kern.nfiles=144
kern.ttycount=3
kern.numvnodes=14901
kern.seminfo.semmni=10
kern.seminfo.semmns=60
kern.seminfo.semmnu=30
kern.seminfo.semmsl=60
kern.seminfo.semopm=100
kern.seminfo.semume=10
kern.seminfo.semusz=112
kern.seminfo.semvmx=32767
kern.seminfo.semaem=16384
kern.shminfo.shmmax=134217728
kern.shminfo.shmmin=1
kern.shminfo.shmmni=128
kern.shminfo.shmseg=128
kern.shminfo.shmall=8192
kern.allowdt=0
kern.maxclusters=65536
kern.timecounter.tick=1
kern.timecounter.timestepwarnings=0
kern.timecounter.hardware=ioclock
kern.timecounter.choice=ioclock(0)
kern.maxlocksperuid=1024
kern.bufcachepercent=20
kern.wxabort=0
kern.consdev=tty00
kern.netlivelocks=57901
kern.pool_debug=0
kern.global_ptrace=0
kern.consbufsize=16336
kern.audio.record=0
kern.timeout_stats=added = 81243186, cancelled = 796200, deleted = 2377863,
late = 142156, pending = 34, readded = 8491, scheduled = 79752165, rescheduled
= 35170, run_softclock = 77840016, run_thread = 2598445, softclocks = 32429986,
thread_wakeups = 2481292
kern.utc_offset=0
vm.loadavg=0.00 0.01 0.00
vm.psstrings=0xffffffe130
vm.swapencrypt.enable=1
vm.swapencrypt.keyscreated=0
vm.swapencrypt.keysdeleted=0
vm.nkmempages=8192
vm.anonmin=10
vm.vtextmin=5
vm.vnodemin=10
vm.malloc_conf=
fs.posix.setuid=1
net.inet.ip.forwarding=1
net.inet.ip.redirect=1
net.inet.ip.ttl=64
net.inet.ip.sourceroute=0
net.inet.ip.directed-broadcast=0
net.inet.ip.portfirst=1024
net.inet.ip.portlast=49151
net.inet.ip.porthifirst=49152
net.inet.ip.porthilast=65535
net.inet.ip.maxqueue=300
net.inet.ip.encdebug=0
net.inet.ip.ipsec-expire-acquire=30
net.inet.ip.ipsec-invalid-life=60
net.inet.ip.ipsec-pfs=1
net.inet.ip.ipsec-soft-allocs=0
net.inet.ip.ipsec-allocs=0
net.inet.ip.ipsec-soft-bytes=0
net.inet.ip.ipsec-bytes=0
net.inet.ip.ipsec-timeout=86400
net.inet.ip.ipsec-soft-timeout=80000
net.inet.ip.ipsec-soft-firstuse=3600
net.inet.ip.ipsec-firstuse=7200
net.inet.ip.ipsec-enc-alg=aes
net.inet.ip.ipsec-auth-alg=hmac-sha1
net.inet.ip.mtudisc=1
net.inet.ip.mtudisctimeout=600
net.inet.ip.ipsec-comp-alg=deflate
net.inet.ip.mforwarding=0
net.inet.ip.multipath=0
net.inet.ip.mrtproto=19
net.inet.ip.arpqueued=0
net.inet.ip.arptimeout=1200
net.inet.ip.arpdown=20
net.inet.ip.arpq.len=0
net.inet.ip.arpq.maxlen=50
net.inet.ip.arpq.drops=0
net.inet.icmp.maskrepl=0
net.inet.icmp.bmcastecho=0
net.inet.icmp.errppslimit=100
net.inet.icmp.rediraccept=0
net.inet.icmp.redirtimeout=600
net.inet.icmp.tstamprepl=1
net.inet.ipip.allow=0
net.inet.tcp.rfc1323=1
net.inet.tcp.keepinittime=150
net.inet.tcp.keepidle=14400
net.inet.tcp.keepintvl=150
net.inet.tcp.slowhz=2
net.inet.tcp.baddynamic=1,7,9,11,13,15,17,18,19,20,21,22,23,25,37,42,43,49,53,57,67,68,70,77,79,80,87,88,95,101,102,103,104,105,106,107,109,110,111,113,115,117,119,123,129,135,137,138,139,143,152,163,164,177,178,179,191,194,199,201,202,204,206,210,213,220,372,389,427,433,443,444,445,464,465,468,512,513,514,515,521,526,530,531,532,540,543,544,545,548,554,556,587,631,636,646,706,749,750,751,754,760,853,871,873,888,901,993,995,1080,1109,1127,1433,1434,1524,1525,1529,1723,1900,2049,2105,2106,2108,2110,2111,2112,2120,2121,2401,2600,2601,2602,2603,2604,2605,2606,2607,2608,2627,2983,3031,3109,3260,3306,3389,3517,3689,3690,4190,4444,4500,4559,5002,5060,5222,5269,5280,5298,5353,5354,5432,5680,5900,6000,6001,6002,6003,6004,6005,6006,6007,6008,6009,6010,6514,6566,7000,7001,7002,7003,7004,7005,7006,7007,7008,7009,7326,8025,8026,8140,8953,9418,10050,10051,16992,16993,16994,16995,20005
net.inet.tcp.sack=1
net.inet.tcp.mssdflt=512
net.inet.tcp.rstppslimit=100
net.inet.tcp.ackonpush=0
net.inet.tcp.ecn=0
net.inet.tcp.syncachelimit=10255
net.inet.tcp.synbucketlimit=105
net.inet.tcp.rfc3390=2
net.inet.tcp.reasslimit=8192
net.inet.tcp.sackholelimit=32768
net.inet.tcp.always_keepalive=0
net.inet.tcp.synuselimit=100000
net.inet.tcp.rootonly=2049
net.inet.tcp.synhashsize=293
net.inet.udp.checksum=1
net.inet.udp.baddynamic=7,9,13,18,19,22,37,39,49,53,67,68,69,70,80,88,105,107,109,110,111,123,129,135,137,138,139,143,161,162,163,164,177,178,179,191,194,199,201,202,204,206,210,213,220,372,389,427,444,445,464,468,500,512,513,514,517,518,520,525,533,546,547,548,554,587,623,631,636,646,664,706,749,750,751,853,993,995,1433,1434,1524,1525,1645,1646,1701,1723,1812,1813,1900,2049,2401,3031,3517,3689,3784,3785,4190,4444,4500,4559,4754,4755,4789,5002,5060,5298,5353,5354,5432,7000,7001,7002,7003,7004,7005,7006,7007,7008,7009,7784,8025,8067,9418,10050,10051,16992,16993,16994,16995,20005,26740
net.inet.udp.recvspace=41600
net.inet.udp.sendspace=9216
net.inet.udp.rootonly=2049
net.inet.gre.allow=0
net.inet.gre.wccp=0
net.inet.esp.enable=1
net.inet.esp.udpencap=1
net.inet.esp.udpencap_port=4500
net.inet.ah.enable=1
net.inet.etherip.allow=0
net.inet.ipcomp.enable=0
net.inet.carp.allow=1
net.inet.carp.preempt=0
net.inet.carp.log=2
net.inet.divert.recvspace=65636
net.inet.divert.sendspace=65636
net.inet6.ip6.forwarding=0
net.inet6.ip6.redirect=1
net.inet6.ip6.hlim=64
net.inet6.ip6.mrtproto=0
net.inet6.ip6.maxfragpackets=200
net.inet6.ip6.log_interval=5
net.inet6.ip6.hdrnestlimit=10
net.inet6.ip6.dad_count=1
net.inet6.ip6.auto_flowlabel=1
net.inet6.ip6.defmcasthlim=1
net.inet6.ip6.use_deprecated=1
net.inet6.ip6.maxfrags=200
net.inet6.ip6.mforwarding=0
net.inet6.ip6.multipath=0
net.inet6.ip6.multicast_mtudisc=0
net.inet6.ip6.neighborgcthresh=2048
net.inet6.ip6.maxdynroutes=4096
net.inet6.ip6.dad_pending=0
net.inet6.ip6.mtudisctimeout=600
net.inet6.ip6.soiikey=7546bde6d656e1a9c2713814fa73365b
net.inet6.icmp6.redirtimeout=600
net.inet6.icmp6.nd6_delay=5
net.inet6.icmp6.nd6_umaxtries=3
net.inet6.icmp6.nd6_mmaxtries=3
net.inet6.icmp6.errppslimit=100
net.inet6.icmp6.nd6_maxnudhint=0
net.inet6.icmp6.mtudisc_hiwat=1280
net.inet6.icmp6.mtudisc_lowat=256
net.inet6.icmp6.nd6_debug=0
net.inet6.divert.recvspace=65636
net.inet6.divert.sendspace=65636
net.bpf.bufsize=32768
net.bpf.maxbufsize=2097152
net.mpls.ttl=255
net.mpls.mapttl_ip=1
net.mpls.mapttl_ip6=0
net.pipex.enable=0
net.pipex.inq.len=0
net.pipex.inq.maxlen=256
net.pipex.inq.drops=0
net.pipex.outq.len=0
net.pipex.outq.maxlen=256
net.pipex.outq.drops=0
hw.machine=octeon
hw.model=Cavium OCTEON (rev 0.1) @ 500 MHz
hw.ncpu=2
hw.byteorder=4321
hw.pagesize=16384
hw.disknames=sd0:2124441bc835a462
hw.diskcount=1
hw.cpuspeed=500
hw.physmem=536870912
hw.usermem=536838144
hw.ncpufound=2
hw.allowpowerdown=1
hw.ncpuonline=2
ddb.radix=16
ddb.max_width=80
ddb.max_line=24
ddb.tab_stop_width=8
ddb.panic=1
ddb.console=0
ddb.log=1
ddb.trigger=0
vfs.mounts.ffs has 9 mounted instances
vfs.ffs.max_softdeps=10648
vfs.ffs.sd_tickdelay=2
vfs.ffs.sd_worklist_push=0
vfs.ffs.sd_blk_limit_push=0
vfs.ffs.sd_ino_limit_push=0
vfs.ffs.sd_blk_limit_hit=0
vfs.ffs.sd_ino_limit_hit=0
vfs.ffs.sd_sync_limit_hit=0
vfs.ffs.sd_indir_blk_ptrs=0
vfs.ffs.sd_inode_bitmap=0
vfs.ffs.sd_direct_blk_ptrs=0
vfs.ffs.sd_dir_entry=0
vfs.ffs.dirhash_dirsize=2560
vfs.ffs.dirhash_maxmem=5242880
vfs.ffs.dirhash_mem=269767
vfs.nfs.iothreads=-1
vfs.fuse.fusefs_open_devices=0
vfs.fuse.fusefs_fbufs_in=0
vfs.fuse.fusefs_fbufs_wait=0
vfs.fuse.fusefs_pool_pages=0