Тормоза пограничного роутера с FreeBsd

[kkadd]

Пограничный роутер с ОС FreeBSD 7.2-RELEASE-p3 FreeBSD 7.2-RELEASE-p3 #1
ipfw минимальный набор правил штук 10.
рутит интернет на 3 сервера... канал 22мб. загрузка 10-12 пики 16мб.
так вот при загрузке хотябы в 6мб теряються пакеты на нашем шлюззе у нашего прова...они исключили проблему... ну так когда я убираю нагрузку с пограничного роутера то потери не пропадают при пингах большими пакетами.7-8%.
вот что то в связке между нами и ними. а когда я ставлю нотик с виндовой машиной потери пропадают....Естественно при потерях работа в сети становиться не возможной в хттп пакеты теряются постоянные перезапросы и лаги (
сусктл обнулил все что было....оставил
net.inet.ip.fastforwarding=1
net.inet.ip.dummynet.io_fast=1

в ядре
options IPFIREWALL
options IPFIREWALL_VERBOSE
options IPFIREWALL_VERBOSE_LIMIT=100
options IPDIVERT
options IPFIREWALL_FORWARD
############################
options IPFILTER
options IPFILTER_LOG
############################
options NSFBUFS=32768
############################
options DEVICE_POLLING
options HZ=2000
###########
но поллинг и включал и выключал тоже самое...
сетевые карты vr0 но и на других пробывал....
причем когда нагрузка 10 мб меряю iperf выдает еще 9-12 мб как и нада...через веб меряю не выдает и метра.... от пользователей идет куча мелких пакетов....так при чем тут пользоветели если я повторюсь что када я их выключю всех картина та же...ну как тока с 7-8% потерь остается дета 2-4% потерь...
вот пинг на яндекс например обычными пакетами
116 packets transmitted, 108 packets received, 6.9% packet loss
round-trip min/avg/max/stddev = 57.029/57.347/58.837/0.290 ms

это при загрузке
Max Average Current
In 10.9 Mb/s (47.1%) 6104.8 kb/s (26.5%) 7608.8 kb/s (33.0%)
Out 11.6 Mb/s (50.4%) 2690.6 kb/s (11.7%) 3404.5 kb/s (14.8%)

сами понимаете смешно (
сделал скрипт для снятия статистики ....там не особо чего криминального (((сча выложу его результат....вызвался парень помочь типа разруливаю 1Гбит но что то нет результата ушел сказал обязалово сообщите в чем было дело (((

=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*
ifconfig
re0: flags=9843<UP,BROADCAST,RUNNING,SIMPLEX,LINK0,MULTICAST> metric 0 mtu 1500
options=389b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_UCAST,WOL_MCAST,WOL_MAGIC>
ether 00:24:8c:9f:cf:a5
inet 217.150.46.241 netmask 0xfffffffc broadcast 217.150.46.243
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
vr0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=2808<VLAN_MTU,WOL_UCAST,WOL_MAGIC>
ether 00:24:01:02:bd:88
inet 80.237.103.225 netmask 0xffffffe0 broadcast 80.237.103.255
media: Ethernet autoselect (100baseTX <full-duplex>)
status: active
plip0: flags=108810<POINTOPOINT,SIMPLEX,MULTICAST,NEEDSGIANT> metric 0 mtu 1500
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
inet6 ::1 prefixlen 128
inet 127.0.0.1 netmask 0xff000000
=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*
vmstat 5 5
procs memory page disk faults cpu
r b w avm fre flt re pi po fr sr ad6 in sy cs us sy id
0 0 0 105816 1689664 26 0 0 0 23 0 0 2611 75 5401 0 5 95
0 0 0 105816 1689664 0 0 0 0 0 0 0 4994 25 10075 0 9 91
0 0 0 105816 1689664 0 0 0 0 1 0 3 4797 27 9676 0 10 90
0 0 0 105816 1689664 0 0 0 0 0 0 0 4952 25 9965 0 9 91
0 0 0 105816 1689664 0 0 0 0 0 0 1 5024 25 10124 0 9 91
=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*
pstat -s
Device 1K-blocks Used Avail Capacity
/dev/ad6s1b 4194304 0 4194304 0%
=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*
iostat 5 5
tty ad6 cpu
tin tout KB/t tps MB/s us ni sy in id
0 22 6.74 1 0.01 0 0 0 5 95
0 0 16.00 1 0.01 0 0 0 9 91
0 0 4.00 1 0.00 0 0 1 7 92
0 0 0.00 0 0.00 0 0 0 8 92
0 0 16.00 1 0.02 0 0 0 10 90
=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*
netstat -i
Name Mtu Network Address Ipkts Ierrs Opkts Oerrs Coll
re0 1500 <Link#1> 00:24:8c:9f:cf:a5 39184966 0 37222771 0 0
re0 1500 217.150.46.24 GateWay 93594 - 245451 - -
vr0 1500 <Link#2> 00:24:01:02:bd:88 36993993 0 38714690 0 0
vr0 1500 80.237.103.22 80.237.103.225 46024 - 105006 - -
plip0 1500 <Link#3> 0 0 0 0 0
lo0 16384 <Link#4> 6 0 6 0 0
lo0 16384 fe80:4::1 fe80:4::1 0 - 0 - -
lo0 16384 localhost ::1 0 - 0 - -
lo0 16384 your-net localhost 6 - 6 - -
=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*
netstat -s
tcp:
133957 packets sent
131100 data packets (89512246 bytes)
479 data packets (673673 bytes) retransmitted
6 data packets unnecessarily retransmitted
1 resend initiated by MTU discovery
1693 ack-only packets (146 delayed)
0 URG only packets
0 window probe packets
291 window update packets
395 control packets
66830 packets received
60182 acks (for 89500610 bytes)
1106 duplicate acks
0 acks for unsent data
6575 packets (1964149 bytes) received in-sequence
1 completely duplicate packet (1348 bytes)
0 old duplicate packets
0 packets with some dup. data (0 bytes duped)
406 out-of-order packets (481828 bytes)
0 packets (0 bytes) of data after window
0 window probes
362 window update packets
1 packet received after close
0 discarded for bad checksums
0 discarded for bad header offset fields
0 discarded because packet too short
0 discarded due to memory problems
8 connection requests
450 connection accepts
0 bad connection attempts
0 listen queue overflows
4 ignored RSTs in the windows
455 connections established (including accepts)
467 connections closed (including 62 drops)
227 connections updated cached RTT on close
227 connections updated cached RTT variance on close
7 connections updated cached ssthresh on close
3 embryonic connections dropped
59024 segments updated rtt (of 56466 attempts)
17 retransmit timeouts
0 connections dropped by rexmit timeout
0 persist timeouts
0 connections dropped by persist timeout
0 Connections (fin_wait_2) dropped because of timeout
0 keepalive timeouts
0 keepalive probes sent
0 connections dropped by keepalive
23352 correct ACK header predictions
4000 correct data packet header predictions
456 syncache entries added
8 retransmitted
4 dupsyn
0 dropped
450 completed
0 bucket overflow
0 cache overflow
4 reset
2 stale
0 aborted
0 badack
0 unreach
0 zone failures
456 cookies sent
0 cookies received
22 SACK recovery episodes
460 segment rexmits in SACK recovery episodes
666080 byte rexmits in SACK recovery episodes
1151 SACK options (SACK blocks) received
337 SACK options (SACK blocks) sent
0 SACK scoreboard overflow
udp:
198 datagrams received
0 with incomplete header
0 with bad data length field
0 with bad checksum
0 with no checksum
36 dropped due to no socket
0 broadcast/multicast datagrams undelivered
0 dropped due to full socket buffers
0 not for hashed pcb
162 delivered
165 datagrams output
0 times multicast source filter matched
sctp:
0 input packets
0 datagrams
0 packets that had data
0 input SACK chunks
0 input DATA chunks
0 duplicate DATA chunks
0 input HB chunks
0 HB-ACK chunks
0 input ECNE chunks
0 input AUTH chunks
0 chunks missing AUTH
0 invalid HMAC ids received
0 invalid secret ids received
0 auth failed
0 fast path receives all one chunk
0 fast path multi-part data
0 output packets
0 output SACKs
0 output DATA chunks
0 retransmitted DATA chunks
0 fast retransmitted DATA chunks
0 FR's that happened more than once to same chunk
0 intput HB chunks
0 output ECNE chunks
0 output AUTH chunks
0 ip_output error counter
Packet drop statistics:
0 from middle box
0 from end host
0 with data
0 non-data, non-endhost
0 non-endhost, bandwidth rep only
0 not enough for chunk header
0 not enough data to confirm
0 where process_chunk_drop said break
0 failed to find TSN
0 attempt reverse TSN lookup
0 e-host confirms zero-rwnd
0 midbox confirms no space
0 data did not match TSN
0 TSN's marked for Fast Retran
Timeouts:
0 iterator timers fired
0 T3 data time outs
0 window probe (T3) timers fired
0 INIT timers fired
0 sack timers fired
0 shutdown timers fired
0 heartbeat timers fired
0 a cookie timeout fired
0 an endpoint changed its cookiesecret
0 PMTU timers fired
0 shutdown ack timers fired
0 shutdown guard timers fired
0 stream reset timers fired
0 early FR timers fired
0 an asconf timer fired
0 auto close timer fired
0 asoc free timers expired
0 inp free timers expired
0 packet shorter than header
0 checksum error
0 no endpoint for port
0 bad v-tag
0 bad SID
0 no memory
0 number of multiple FR in a RTT window
0 RFC813 allowed sending
0 RFC813 does not allow sending
0 times max burst prohibited sending
0 look ahead tells us no memory in interface
0 numbers of window probes sent
0 times an output error to clamp down on next user send
0 times sctp_senderrors were caused from a user
0 number of in data drops due to chunk limit reached
0 number of in data drops due to rwnd limit reached
0 times a ECN reduced the cwnd
0 used express lookup via vtag
0 collision in express lookup
0 times the sender ran dry of user data on primary
0 same for above
0 sacks the slow way
0 window update only sacks sent
0 sends with sinfo_flags !=0
0 unordered sends
0 sends with EOF flag set
0 sends with ABORT flag set
0 times protocol drain called
0 times we did a protocol drain
0 times recv was called with peek
0 cached chunks used
0 cached stream oq's used
0 unread messages abandonded by close
0 send burst avoidance, already max burst inflight to net
0 send cwnd full avoidance, already max burst inflight to net
0 number of map array over-runs via fwd-tsn's
ip:
76179077 total packets received
0 bad header checksums
0 with size smaller than minimum
0 with data size < data length
0 with ip length > max ip packet size
0 with header length < data size
0 with data length < header length
0 with bad options
0 with incorrect version number
0 fragments received
0 fragments dropped (dup or out of space)
0 fragments dropped after timeout
0 packets reassembled ok
138687 packets for this host
941 packets for unknown/unsupported protocol
75116245 packets forwarded (75116245 packets fast forwarded)
56 packets not forwardable
0 packets received for unknown multicast group
0 redirects sent
350468 packets sent from this host
0 packets sent with fabricated ip header
0 output packets dropped due to no bufs, etc.
0 output packets discarded due to no route
471095 output datagrams fragmented
942190 fragments created
134493 datagrams that can't be fragmented
0 tunneling packets that can't find gif
0 datagrams with bad address in header
icmp:
141234 calls to icmp_error
3 errors not generated in response to an icmp message
Output histogram:
echo reply: 1720
destination unreachable: 136831
time exceeded: 4401
time stamp reply: 3
0 messages with bad code fields
0 messages less than the minimum length
0 messages with bad checksum
0 messages with bad length
0 multicast echo requests ignored
0 multicast timestamp requests ignored
Input histogram:
echo reply: 70731
#7: 5
echo: 1720
time stamp: 3
information request reply: 5
mobile registration req: 3
mobile registration reply: 7
domain name request: 1
1723 message responses generated
0 invalid return addresses
0 no return routes
ICMP address mask responses are disabled
igmp:
0 messages received
0 messages received with too few bytes
0 messages received with bad checksum
0 membership queries received
0 membership queries received with invalid field(s)
0 membership reports received
0 membership reports received with invalid field(s)
0 membership reports received for groups to which we belong
0 membership reports sent
ip6:
0 total packets received
0 with size smaller than minimum
0 with data size < data length
0 with bad options
0 with incorrect version number
0 fragments received
0 fragments dropped (dup or out of space)
0 fragments dropped after timeout
0 fragments that exceeded limit
0 packets reassembled ok
0 packets for this host
0 packets forwarded
0 packets not forwardable
0 redirects sent
4 packets sent from this host
0 packets sent with fabricated ip header
0 output packets dropped due to no bufs, etc.
0 output packets discarded due to no route
0 output datagrams fragmented
0 fragments created
0 datagrams that can't be fragmented
0 packets that violated scope rules
0 multicast packets which we don't join
Mbuf statistics:
0 one mbuf
0 one ext mbuf
0 two or more ext mbuf
0 packets whose headers are not continuous
0 tunneling packets that can't find gif
0 packets discarded because of too many headers
0 failures of source address selection
0 forward cache hit
0 forward cache miss
Source addresses selection rule applied:
icmp6:
0 calls to icmp6_error
0 errors not generated in response to an icmp6 message
0 errors not generated because of rate limitation
Output histogram:
multicast listener report: 4
0 messages with bad code fields
0 messages < minimum length
0 bad checksums
0 messages with bad length
Histogram of error messages to be generated:
0 no route
0 administratively prohibited
0 beyond scope
0 address unreachable
0 port unreachable
0 packet too big
0 time exceed transit
0 time exceed reassembly
0 erroneous header field
0 unrecognized next header
0 unrecognized option
0 redirect
0 unknown
0 message responses generated
0 messages with too many ND options
0 messages with bad ND options
0 bad neighbor solicitation messages
0 bad neighbor advertisement messages
0 bad router solicitation messages
0 bad router advertisement messages
0 bad redirect messages
0 path MTU changes
rip6:
0 messages received
0 checksum calculations on inbound
0 messages with bad checksum
0 messages dropped due to no socket
0 multicast messages dropped due to no socket
0 messages dropped due to full socket buffers
0 delivered
0 datagrams output
=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*
kldstat
Id Refs Address Size Name
1 7 0xc0400000 a3f984 kernel
2 1 0xc0e40000 6a45c acpi.ko
3 1 0xc5a4b000 22000 linux.ko
=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*
ps -auxww
USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND
root 11 96.7 0.0 0 8 ?? RL 1:41AM 775:14.42 [idle: cpu0]
root 22 3.7 0.0 0 8 ?? WL 1:41AM 16:02.04 [irq19: vr0]
root 17 3.5 0.0 0 8 ?? WL 1:41AM 16:07.79 [swi5: +]
root 13 0.0 0.0 0 8 ?? WL 1:41AM 4:43.22 [swi4: clock sio]
root 0 0.0 0.0 0 0 ?? DLs 1:41AM 0:00.11 [swapper]
root 1 0.0 0.0 1888 488 ?? ILs 1:41AM 0:00.01 /sbin/init --
root 2 0.0 0.0 0 8 ?? DL 1:41AM 0:01.12 [g_event]
root 3 0.0 0.0 0 8 ?? DL 1:41AM 0:01.87 [g_up]
root 4 0.0 0.0 0 8 ?? DL 1:41AM 0:02.18 [g_down]
root 5 0.0 0.0 0 8 ?? DL 1:41AM 0:00.00 [kqueue taskq]
root 6 0.0 0.0 0 8 ?? DL 1:41AM 0:00.00 [xpt_thrd]
root 7 0.0 0.0 0 8 ?? DL 1:41AM 0:00.00 [acpi_task_0]
root 8 0.0 0.0 0 8 ?? DL 1:41AM 0:00.00 [acpi_task_1]
root 9 0.0 0.0 0 8 ?? DL 1:41AM 0:00.00 [acpi_task_2]
root 10 0.0 0.0 0 8 ?? DL 1:41AM 0:00.00 [audit]
root 12 0.0 0.0 0 8 ?? WL 1:41AM 0:00.00 [swi1: net]
root 14 0.0 0.0 0 8 ?? WL 1:41AM 0:00.00 [swi3: vm]
root 15 0.0 0.0 0 8 ?? DL 1:41AM 1:40.60 [yarrow]
root 16 0.0 0.0 0 8 ?? WL 1:41AM 0:00.00 [swi2: cambio]
root 18 0.0 0.0 0 8 ?? DL 1:41AM 0:00.00 [thread taskq]
root 19 0.0 0.0 0 8 ?? WL 1:41AM 0:00.12 [swi6: Giant taskq]
root 20 0.0 0.0 0 8 ?? WL 1:41AM 0:00.00 [swi6: task queue]
root 21 0.0 0.0 0 8 ?? WL 1:41AM 0:00.00 [irq9: acpi0]
root 23 0.0 0.0 0 8 ?? WL 1:41AM 0:00.00 [irq18: atapci0]
root 24 0.0 0.0 0 8 ?? WL 1:41AM 0:01.26 [irq22: atapci1]
root 25 0.0 0.0 0 8 ?? DL 1:41AM 0:00.10 [fdc0]
root 26 0.0 0.0 0 8 ?? WL 1:41AM 0:00.00 [irq1: atkbd0]
root 27 0.0 0.0 0 8 ?? WL 1:41AM 0:00.00 [swi0: sio]
root 28 0.0 0.0 0 8 ?? WL 1:41AM 0:00.00 [irq14: ata0]
root 29 0.0 0.0 0 8 ?? WL 1:41AM 0:00.00 [irq15: ata1]
root 30 0.0 0.0 0 8 ?? WL 1:41AM 0:00.00 [irq7: ppbus0 ppc0]
root 31 0.0 0.0 0 16 ?? DL 1:41AM 0:00.00 [sctp_iterator]
root 32 0.0 0.0 0 8 ?? DL 1:41AM 0:00.03 [pagedaemon]
root 33 0.0 0.0 0 8 ?? DL 1:41AM 0:00.00 [vmdaemon]
root 34 0.0 0.0 0 8 ?? DL 1:41AM 0:00.04 [idlepoll]
root 35 0.0 0.0 0 8 ?? DL 1:41AM 0:00.00 [pagezero]
root 36 0.0 0.0 0 8 ?? DL 1:41AM 0:00.11 [bufdaemon]
root 37 0.0 0.0 0 8 ?? DL 1:41AM 0:00.11 [vnlru]
root 38 0.0 0.0 0 8 ?? DL 1:41AM 0:50.22 [syncer]
root 39 0.0 0.0 0 8 ?? DL 1:41AM 0:00.37 [softdepflush]
root 522 0.0 0.0 1888 568 ?? Is 1:41AM 0:00.02 /sbin/devd
root 591 0.0 0.1 3184 1224 ?? Ss 1:41AM 0:00.09 /usr/sbin/syslogd -s
root 798 0.0 0.1 4052 2368 ?? Ss 1:41AM 0:00.85 /usr/local/sbin/httpd
root 894 0.0 0.2 5752 3256 ?? Is 1:41AM 0:00.01 /usr/sbin/sshd
root 901 0.0 0.1 3212 1276 ?? Ss 1:41AM 0:00.12 /usr/sbin/cron -s
root 926 0.0 0.1 3240 1352 ?? Is 1:41AM 0:00.00 /usr/sbin/inetd -wW -C 60
www 962 0.0 0.1 4052 2500 ?? I 1:41AM 0:00.06 /usr/local/sbin/httpd
www 963 0.0 0.1 4052 2500 ?? I 1:41AM 0:00.05 /usr/local/sbin/httpd
www 964 0.0 0.1 4052 2520 ?? I 1:41AM 0:00.05 /usr/local/sbin/httpd
www 965 0.0 0.1 4052 2496 ?? I 1:41AM 0:00.05 /usr/local/sbin/httpd
www 966 0.0 0.1 4052 2500 ?? I 1:41AM 0:00.04 /usr/local/sbin/httpd
www 1014 0.0 0.1 4052 2500 ?? I 1:45AM 0:00.05 /usr/local/sbin/httpd
www 1021 0.0 0.1 4052 2500 ?? I 1:45AM 0:00.05 /usr/local/sbin/httpd
www 1022 0.0 0.1 4052 2500 ?? I 1:45AM 0:00.04 /usr/local/sbin/httpd
www 1023 0.0 0.1 4052 2500 ?? I 1:45AM 0:00.04 /usr/local/sbin/httpd
www 1024 0.0 0.1 4052 2500 ?? I 1:45AM 0:00.05 /usr/local/sbin/httpd
root 4674 0.0 0.2 8428 3884 ?? Is 2:01PM 0:00.03 sshd: user [priv] (sshd)
user 4677 0.0 0.2 8428 3956 ?? I 2:02PM 0:00.09 sshd: user@ttyp0 (sshd)
root 947 0.0 0.1 3624 1628 v0 Is 1:41AM 0:00.02 login [pam] (login)
root 967 0.0 0.1 4464 2268 v0 I 1:42AM 0:00.02 -csh (csh)
=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*=*
top -Sb -n 1000
last pid: 5031; load averages: 0.02, 0.18, 0.12 up 0+13:37:44 15:19:04
76 processes: 2 running, 58 sleeping, 16 waiting

Mem: 15M Active, 206M Inact, 127M Wired, 20K Cache, 112M Buf, 1650M Free
Swap: 4096M Total, 4096M Free


PID USERNAME THR PRI NICE SIZE RES STATE TIME WCPU COMMAND
11 root 1 171 ki31 0K 8K RUN 775:14 96.73% idle: cpu0
22 root 1 -68 - 0K 8K WAIT 16:02 3.66% irq19: vr0
17 root 1 -28 - 0K 8K WAIT 16:08 3.52% swi5: +
13 root 1 -32 - 0K 8K WAIT 4:43 0.05% swi4: clock sio
15 root 1 -16 - 0K 8K - 1:41 0.00% yarrow
38 root 1 20 - 0K 8K syncer 0:50 0.00% syncer
4 root 1 -8 - 0K 8K - 0:02 0.00% g_down
3 root 1 -8 - 0K 8K - 0:02 0.00% g_up
24 root 1 -64 - 0K 8K WAIT 0:01 0.00% irq22: atapci1
2 root 1 -8 - 0K 8K - 0:01 0.00% g_event
798 root 1 44 0 4052K 2368K select 0:01 0.00% httpd
39 root 1 -16 - 0K 8K sdflus 0:00 0.00% softdepflush
901 root 1 8 0 3212K 1276K nanslp 0:00 0.00% cron
19 root 1 -24 - 0K 8K WAIT 0:00 0.00% swi6: Giant taskq
0 root 1 -16 0 0K 0K sched 0:00 0.00% swapper
37 root 1 -4 - 0K 8K vlruwt 0:00 0.00% vnlru
36 root 1 -16 - 0K 8K psleep 0:00 0.00% bufdaemon
4997 root 1 44 0 21996K 5792K select 0:00 0.00% mc
25 root 1 -8 - 0K 8K - 0:00 0.00% fdc0
4677 user 1 44 0 8428K 3956K select 0:00 0.00% sshd
591 root 1 44 0 3184K 1224K select 0:00 0.00% syslogd
962 www 1 4 0 4052K 2500K accept 0:00 0.00% httpd
965 www 1 4 0 4052K 2496K accept 0:00 0.00% httpd
963 www 1 4 0 4052K 2500K accept 0:00 0.00% httpd
1024 www 1 4 0 4052K 2500K accept 0:00 0.00% httpd
1021 www 1 4 0 4052K 2500K accept 0:00 0.00% httpd
964 www 1 4 0 4052K 2520K accept 0:00 0.00% httpd
1014 www 1 4 0 4052K 2500K accept 0:00 0.00% httpd
966 www 1 4 0 4052K 2500K accept 0:00 0.00% httpd
34 root 1 171 ki31 0K 8K pollid 0:00 0.00% idlepoll
1022 www 1 4 0 4052K 2500K accept 0:00 0.00% httpd
1023 www 1 4 0 4052K 2500K accept 0:00 0.00% httpd
32 root 1 -16 - 0K 8K psleep 0:00 0.00% pagedaemon
2257 root 1 5 0 4464K 2276K ttyin 0:00 0.00% csh
4674 root 1 4 0 8428K 3884K sbwait 0:00 0.00% sshd
4682 root 1 20 0 5488K 2628K pause 0:00 0.00% csh
522 root 1 71 0 1888K 568K select 0:00 0.00% devd
947 root 1 8 0 3624K 1628K wait 0:00 0.00% login
967 root 1 20 0 4464K 2268K pause 0:00 0.00% csh
4999 root 1 20 0 5488K 2616K pause 0:00 0.00% csh
4679 user 1 8 0 3464K 1544K wait 0:00 0.00% sh
4681 user 1 8 0 3620K 1596K wait 0:00 0.00% su
1 root 1 8 0 1888K 488K wait 0:00 0.00% init
894 root 1 44 0 5752K 3256K select 0:00 0.00% sshd
2256 root 1 8 0 3620K 1528K wait 0:00 0.00% su
26 root 1 -60 - 0K 8K WAIT 0:00 0.00% irq1: atkbd0
5021 root 1 8 0 3464K 1420K wait 0:00 0.00% sh
5031 root 1 45 0 3496K 1660K RUN 0:00 0.00% top
948 root 1 5 0 3184K 1096K ttyin 0:00 0.00% getty
20 root 1 -24 - 0K 8K WAIT 0:00 0.00% swi6: task queue
954 root 1 5 0 3184K 1096K ttyin 0:00 0.00% getty
953 root 1 5 0 3184K 1096K ttyin 0:00 0.00% getty
950 root 1 5 0 3184K 1096K ttyin 0:00 0.00% getty
949 root 1 5 0 3184K 1096K ttyin 0:00 0.00% getty
951 root 1 5 0 3184K 1096K ttyin 0:00 0.00% getty
952 root 1 5 0 3184K 1096K ttyin 0:00 0.00% getty
926 root 1 96 0 3240K 1352K select 0:00 0.00% inetd
35 root 1 171 ki31 0K 8K pgzero 0:00 0.00% pagezero
12 root 1 -44 - 0K 8K WAIT 0:00 0.00% swi1: net
31 root 1 -16 - 0K 16K waitin 0:00 0.00% sctp_iterator
33 root 1 20 - 0K 8K psleep 0:00 0.00% vmdaemon
8 root 1 8 - 0K 8K - 0:00 0.00% acpi_task_1
7 root 1 8 - 0K 8K - 0:00 0.00% acpi_task_0
5 root 1 8 - 0K 8K - 0:00 0.00% kqueue taskq
9 root 1 8 - 0K 8K - 0:00 0.00% acpi_task_2

[Хостинг HostFood.ru]

Тарифы на хостинг в России, от 12 рублей: https://www.host-food.ru/tariffs/hosting/
Тарифы на виртуальные сервера (VPS/VDS/KVM) в РФ, от 189 руб.: https://www.host-food.ru/tariffs/virtualny-server-vps/
Выделенные сервера, Россия, Москва, от 2000 рублей (HP Proliant G5, Intel Xeon E5430 (2.66GHz, Quad-Core, 12Mb), 8Gb RAM, 2x300Gb SAS HDD, P400i, 512Mb, BBU):
https://www.host-food.ru/tariffs/vydelennyi-server-ds/
Недорогие домены в популярных зонах: https://www.host-food.ru/domains/

[Plohish]

какие установлены сетёвки?

[kkadd]

Были Длинк простые 520е 100ки vr поставил msk тож длинк дге. таже картина.

[kkadd]

вместо нашего провайдера(нашего шлюза) воткнул машину с адресами соответственно ихними потерь нет при флудпинге 0 - 0,1%. т.е. карты или железо не затыкается. но с тойже стороны када канал четка загрухен тесщу айперфом выдает скрость полную. торренты там итп качают на все. а вот хттп из этих потерь пакетов в ауте включая все эти дела.
так же пробывал другое железо сконфигурил подобную тачку. воткнул та же беда как и была...

[Plohish]

вот тут подобное я писал http://forum.lissyara.su/viewtopic.php?f=4&t=23020
замена сетёвок на 3COM дала какой то результат, а вообще, в таких вещах советуют сетёвки от INTEL

Adapters supported by the fxp(4) driver include:

Intel EtherExpress PRO/10
Intel InBusiness 10/100
Intel PRO/100B / EtherExpressPRO/100 B PCI Adapter
Intel PRO/100+ Management Adapter
Intel PRO/100 VE Desktop Adapter
Intel PRO/100 VM Network Connection
Intel PRO/100 M Desktop Adapter
Intel PRO/100 S Desktop, Server and Dual-Port Server Adapters
Contec C-NET(PI)-100TX (PC-98)
NEC PC-9821Ra20, Rv20, Xv13, Xv20 internal 100Base-TX (PC-98)
NEC PC-9821X-B06 (PC-98)

[kkadd]

а как на счет intel pro-1000 pt server adapter ? на внутренней раздающей стоят оч нравятся.... те которые em

[Plohish]

фиг его знает, наверное надо смотреть на каком они чипе, и сверяться с описанием применяемости.
Я этот список взял из
FreeBSD 7.2-RELEASE Hardware Notes
но про INTEL много читал, люди предпочитают их в роутерах...
из за поддержки дров fxp

[buryanov]

У меня была подобная проблема, шлюз собирался/настраивался наскорую, денег на новое не было и потетстить под нагрузкой не получилось. В лан сперва поставил

Код: Выделить всё

skc0@pci0:1:9:0:        class=0x020000 card=0x4b011186 chip=0x4b011186 rev=0x11 hdr=0x00
    vendor     = 'D-Link System Inc'
    device     = 'DGE-530T V.B1 Gigabit Ethernet Adapter (rev 11)'

затем заменил на

Код: Выделить всё

fxp0@pci0:1:8:0:        class=0x020000 card=0x30138086 chip=0x24498086 rev=0x01 hdr=0x00
    vendor     = 'Intel Corporation'
    device     = '82559ER 82559ER Integrated 10Base-T/100Base-TX Ethernet Controller'

на нейже поднят vlan на прова,
на второго прова смотрит

Код: Выделить всё

xl2@pci0:1:12:0:        class=0x020000 card=0x905510b7 chip=0x905510b7 rev=0x30 hdr=0x00
    vendor     = '3COM Corp, Networking Division'
    device     = '3C905-TX Fast Etherlink 10/100 PCI TX NIC'

Polling выключен, с ним появлялось до 20% потерь. Dlink умер(загрёбся) буквально сразу, fxp встроенная в мамку. На хl3 висят тестовые Windows сервера, доступные из мира. На xl1 корпоратив в другой офис.

Код: Выделить всё

   25 root         1 -68    -     0K     8K WAIT   105.9H 30.13% irq11: fxp0 skc0++
   24 root         1 -68    -     0K     8K WAIT    47.7H 11.96% irq9: xl1 uhci1+
   28 root         1 -68    -     0K     8K WAIT    45.7H  8.96% irq9: xl3 
   12 root         1 -44    -     0K     8K WAIT    42.9H  2.25% swi1: net

Код: Выделить всё

 netstat -w 1
            input        (Total)           output
   packets  errs      bytes    packets  errs      bytes colls
     19727     0    7453079      19610     0    7926902     0
     19960     0    8253769      20230     0    8605769     0
     17552     0    8277425      18867     0    8742281     0
     20381     0    7712384      20465     0    8197892     0

Код: Выделить всё

 uname -a
FreeBSD hqgw1..lan 7.2-STABLE FreeBSD 7.2-STABLE #1: Wed May 27 15:08:40 EEST 2009     root@hqgw1..lan:/usr/obj/usr/src/sys/i386.v1  i386

Код: Выделить всё

dd if=/dev/mem bs=64k skip=15 count=1|strings|less
Intel Corporation D815EEA
Intel Corporation Pentium(R)III 733

Код: Выделить всё

 ipfw show|wc -l
     107
ipfw nat  show config|wc -l
       8

[kkadd]

поставил на нот фрю потерь 0% радои было.... потом другие карты акорпа поставил...думал проверить на другом маршрутизаторе таже песня...тыкнул обратно в нот тоже патери... завтра думаю последнюю милю тестить линк от прова оптика с пол км стоят длинк конверторы 520 R и T. с провам поднимался вопрос они такие уверенные типа у нас сиски у нас спецы капайтесь у себя...а на портике их циски индикация дуплекса прыгала последний раз.... ну ваще то када тестим айперфом выдает нужную скорость ваще взрыв мозга кароче...