Перейти к содержимому
Калькуляторы
NAT под FreeBSD.  

198 пользователей проголосовало

  1. 1. Кто и какой использует NAT



NAT под FreeBSD. Кто и какой использует NAT на своих BRAS-Freebsd

Коллеги, внезапно случилось так:

9.3-STABLE FreeBSD 9.3-STABLE #1: Wed Dec  9 10:16:31 EET 2015 

last pid:  2448;  load averages: 15.09, 14.96, 14.28                                                 up 0+00:47:00  20:05:30
214 processes: 20 running, 127 sleeping, 50 waiting, 7 lock
CPU 0:  0.0% user,  0.0% nice, 33.3% system, 66.7% interrupt,  0.0% idle
CPU 1:  0.0% user,  0.0% nice, 25.0% system, 72.2% interrupt,  2.8% idle
CPU 2:  0.0% user,  0.0% nice, 27.8% system, 72.2% interrupt,  0.0% idle
CPU 3:  0.0% user,  0.0% nice, 27.8% system, 69.4% interrupt,  2.8% idle
CPU 4:  0.0% user,  0.0% nice, 27.8% system, 69.4% interrupt,  2.8% idle
CPU 5:  0.0% user,  0.0% nice, 36.1% system, 63.9% interrupt,  0.0% idle
CPU 6:  0.0% user,  0.0% nice, 30.6% system, 61.1% interrupt,  8.3% idle
CPU 7:  0.0% user,  0.0% nice, 25.0% system, 61.1% interrupt, 13.9% idle
Mem: 514M Active, 92M Inact, 1000M Wired, 185M Buf, 6168M Free
Swap: 4096M Total, 4096M Free

 PID USERNAME   PRI NICE   SIZE    RES STATE   C   TIME    WCPU COMMAND
  12 root       -92    -     0K   960K WAIT    6  20:27  43.90% intr{irq270: ix0:que }
  12 root       -92    -     0K   960K CPU7    7  20:12  43.80% intr{irq271: ix0:que }
  12 root       -92    -     0K   960K WAIT    0  21:02  43.16% intr{irq264: ix0:que }
  12 root       -92    -     0K   960K WAIT    3  19:27  42.77% intr{irq267: ix0:que }
  12 root       -92    -     0K   960K RUN     4  19:53  42.38% intr{irq268: ix0:que }
  12 root       -92    -     0K   960K WAIT    2  19:57  40.87% intr{irq266: ix0:que }
  12 root       -92    -     0K   960K WAIT    1  20:06  40.09% intr{irq265: ix0:que }
  12 root       -92    -     0K   960K RUN     5  19:29  39.26% intr{irq269: ix0:que }
  12 root       -92    -     0K   960K RUN     4  14:13  34.67% intr{irq277: ix1:que }
   0 root       -92    0     0K   736K -       0  15:03  34.38% kernel{ix0 que}
   0 root       -92    0     0K   736K CPU3    3  14:38  34.18% kernel{ix0 que}
   0 root       -92    0     0K   736K -       4  13:22  34.18% kernel{ix0 que}
  12 root       -92    -     0K   960K CPU2    2  14:13  33.40% intr{irq275: ix1:que }
   0 root       -92    0     0K   736K -       1  14:30  32.18% kernel{ix0 que}
   0 root       -92    0     0K   736K -       6  14:17  31.59% kernel{ix0 que}
  12 root       -92    -     0K   960K RUN     5  12:24  30.86% intr{irq278: ix1:que }
  12 root       -92    -     0K   960K RUN     3  13:55  30.76% intr{irq276: ix1:que }
  12 root       -92    -     0K   960K CPU1    1  13:06  30.37% intr{irq274: ix1:que }
   0 root       -92    0     0K   736K -       5  12:19  28.56% kernel{ix0 que}
  12 root       -92    -     0K   960K RUN     0  11:38  25.00% intr{irq273: ix1:que }
  12 root       -92    -     0K   960K WAIT    6   8:36  21.88% intr{irq279: ix1:que }
  12 root       -92    -     0K   960K RUN     7   7:41  20.17% intr{irq280: ix1:que }
   0 root       -92    0     0K   736K -       1   5:24  14.70% kernel{ix0 que}
   0 root       -92    0     0K   736K -       7   6:30  13.28% kernel{ix0 que}
  11 root       155 ki31     0K   128K RUN     7   4:49   6.40% idle{idle: cpu7}
  11 root       155 ki31     0K   128K RUN     6   4:24   5.76% idle{idle: cpu6}
1325 root        23    0   372M   355M select  6   1:10   3.56% bgpd

ix0 смотрит в МИР через свитч, ошибок на этом порту нет.

            input          (ix0)           output
  packets  errs idrops      bytes    packets  errs      bytes colls
     373k     0  3.4k       214M       329k     0        45M     0
     377k     0  3.2k       218M       331k     0        46M     0
     372k     0  3.4k       210M       330k     0        45M     0
     374k     0  3.4k       216M       329k     0        46M     0
     372k     0  2.6k       211M       329k     0        45M     0
     374k     0  3.2k       209M       331k     0        46M     0
     371k     0  3.4k       206M       330k     0        46M     0
     368k     0  3.6k       204M       329k     0        46M     0
     374k     0  4.2k       209M       332k     0        44M     0
     374k     0  3.1k       207M       331k     0        45M     0
     368k     0  3.7k       209M       326k     0        45M     0
     376k     0  3.8k       214M       332k     0        45M     0
     376k     0  4.2k       222M       328k     0        45M     0
     373k     0  3.7k       213M       331k     0        44M     0
     378k     0  2.8k       215M       331k     0        45M     0
     374k     0  2.9k       212M       332k     0        45M     0
     376k     0  3.5k       212M       334k     0        45M     0
     377k     0  2.8k       204M       337k     0        46M     0
     368k     0  3.8k       209M       329k     0        47M     0
     369k     0  4.2k       207M       329k     0        47M     0
     372k     0  3.9k       208M       329k     0        45M     0

 

Это не максимально достижимые цифры по мегабайтам, pps такого еще небыло, был очень близкий.

Внезапно появились idrops только на ix0 - что это ?

Начал деградировать сервис, остановился на цифрах выше в мегабайтах и pps.

Появились процессы kernel{ix0 que}.

PF nat.

Поделиться сообщением


Ссылка на сообщение
Поделиться на других сайтах

Начало отпускать и отпустило.

last pid:  2612;  load averages: 15.43, 15.04, 14.71                                                 up 0+01:03:02  21:12:12
197 processes: 23 running, 125 sleeping, 49 waiting
CPU 0:  0.0% user,  0.0% nice, 32.4% system, 65.8% interrupt,  1.8% idle
CPU 1:  0.0% user,  0.0% nice, 21.6% system, 74.8% interrupt,  3.6% idle
CPU 2:  0.0% user,  0.0% nice, 16.2% system, 81.1% interrupt,  2.7% idle
CPU 3:  0.0% user,  0.0% nice, 27.0% system, 69.4% interrupt,  3.6% idle
CPU 4:  0.0% user,  0.0% nice, 24.3% system, 71.2% interrupt,  4.5% idle
CPU 5:  0.0% user,  0.0% nice, 17.1% system, 78.4% interrupt,  4.5% idle
CPU 6:  0.0% user,  0.0% nice, 26.1% system, 67.6% interrupt,  6.3% idle
CPU 7:  0.0% user,  0.0% nice, 27.0% system, 60.4% interrupt, 12.6% idle
Mem: 514M Active, 96M Inact, 1002M Wired, 240M Buf, 6162M Free
Swap: 4096M Total, 4096M Free

 PID USERNAME   PRI NICE   SIZE    RES STATE   C   TIME    WCPU COMMAND
  12 root       -92    -     0K   960K RUN     0  27:57  48.19% intr{irq264: ix0:que }
  12 root       -92    -     0K   960K CPU2    2  26:44  47.66% intr{irq266: ix0:que }
  12 root       -92    -     0K   960K WAIT    6  27:17  47.36% intr{irq270: ix0:que }
  12 root       -92    -     0K   960K CPU7    7  27:04  46.19% intr{irq271: ix0:que }
  12 root       -92    -     0K   960K WAIT    4  26:18  45.07% intr{irq268: ix0:que }
  12 root       -92    -     0K   960K WAIT    5  25:46  43.55% intr{irq269: ix0:que }
  12 root       -92    -     0K   960K CPU1    1  26:15  42.48% intr{irq265: ix0:que }
  12 root       -92    -     0K   960K WAIT    3  25:58  42.19% intr{irq267: ix0:que }
   0 root       -92    0     0K   736K RUN     4  19:36  32.57% kernel{ix0 que}
   0 root       -92    0     0K   736K CPU0    0  20:03  31.98% kernel{ix0 que}
   0 root       -92    0     0K   736K -       5  19:27  31.98% kernel{ix0 que}
   0 root       -92    0     0K   736K -       6  18:29  31.59% kernel{ix0 que}
  12 root       -92    -     0K   960K RUN     2  19:26  30.96% intr{irq275: ix1:que }
  12 root       -92    -     0K   960K CPU5    5  16:49  30.47% intr{irq278: ix1:que }
   0 root       -92    0     0K   736K -       6  19:18  28.27% kernel{ix0 que}
  12 root       -92    -     0K   960K RUN     1  17:34  27.49% intr{irq274: ix1:que }
  12 root       -92    -     0K   960K WAIT    3  18:29  26.66% intr{irq276: ix1:que }
   0 root       -92    0     0K   736K -       7  16:35  25.88% kernel{ix0 que}
  12 root       -92    -     0K   960K CPU4    4  18:56  23.78% intr{irq277: ix1:que }
  12 root       -92    -     0K   960K RUN     0  15:28  23.58% intr{irq273: ix1:que }
  12 root       -92    -     0K   960K RUN     6  11:30  17.68% intr{irq279: ix1:que }
  12 root       -92    -     0K   960K RUN     7  10:10  13.18% intr{irq280: ix1:que }
  11 root       155 ki31     0K   128K RUN     7   6:10  12.99% idle{idle: cpu7}
   0 root       -92    0     0K   736K CPU4    4   8:26  11.08% kernel{ix0 que}
  11 root       155 ki31     0K   128K RUN     6   5:35  10.50% idle{idle: cpu6}
   0 root       -92    0     0K   736K -       2   7:35   6.49% kernel{ix0 que}
  11 root       155 ki31     0K   128K RUN     3   2:52   5.66% idle{idle: cpu3}

last pid:  2625;  load averages: 14.27, 14.79, 14.63                                                 up 0+01:03:52  21:13:02
197 processes: 24 running, 126 sleeping, 47 waiting
CPU 0:  0.0% user,  0.0% nice, 10.9% system, 85.2% interrupt,  3.9% idle
CPU 1:  0.0% user,  0.0% nice,  7.0% system, 88.3% interrupt,  4.7% idle
CPU 2:  0.0% user,  0.0% nice, 11.7% system, 83.6% interrupt,  4.7% idle
CPU 3:  0.0% user,  0.0% nice,  7.8% system, 86.7% interrupt,  5.5% idle
CPU 4:  0.0% user,  0.0% nice, 22.7% system, 75.0% interrupt,  2.3% idle
CPU 5:  0.0% user,  0.0% nice, 17.2% system, 77.3% interrupt,  5.5% idle
CPU 6:  0.0% user,  0.0% nice, 20.3% system, 62.5% interrupt, 17.2% idle
CPU 7:  0.0% user,  0.0% nice, 24.2% system, 62.5% interrupt, 13.3% idle
Mem: 514M Active, 96M Inact, 1002M Wired, 240M Buf, 6163M Free
Swap: 4096M Total, 4096M Free

 PID USERNAME   PRI NICE   SIZE    RES STATE   C   TIME    WCPU COMMAND
  12 root       -92    -     0K   960K CPU1    1  26:42  54.88% intr{irq265: ix0:que }
  12 root       -92    -     0K   960K RUN     4  26:44  54.69% intr{irq268: ix0:que }
  12 root       -92    -     0K   960K CPU0    0  28:23  54.59% intr{irq264: ix0:que }
  12 root       -92    -     0K   960K WAIT    2  27:09  54.49% intr{irq266: ix0:que }
  12 root       -92    -     0K   960K RUN     3  26:23  52.29% intr{irq267: ix0:que }
  12 root       -92    -     0K   960K CPU6    6  27:40  50.10% intr{irq270: ix0:que }
  12 root       -92    -     0K   960K WAIT    5  26:10  49.66% intr{irq269: ix0:que }
  12 root       -92    -     0K   960K CPU7    7  27:28  48.39% intr{irq271: ix0:que }
  12 root       -92    -     0K   960K CPU2    2  19:42  31.05% intr{irq275: ix1:que }
  12 root       -92    -     0K   960K RUN     3  18:43  28.66% intr{irq276: ix1:que }
  12 root       -92    -     0K   960K RUN     1  17:47  27.29% intr{irq274: ix1:que }
   0 root       -92    0     0K   736K CPU3    3  19:48  26.37% kernel{ix0 que}
  12 root       -92    -     0K   960K WAIT    5  17:02  25.59% intr{irq278: ix1:que }
  12 root       -92    -     0K   960K RUN     4  19:08  24.56% intr{irq277: ix1:que }
  12 root       -92    -     0K   960K RUN     0  15:40  24.17% intr{irq273: ix1:que }
   0 root       -92    0     0K   736K CPU4    4  19:38  23.58% kernel{ix0 que}
   0 root       -92    0     0K   736K -       0  20:15  22.75% kernel{ix0 que}
  12 root       -92    -     0K   960K RUN     6  11:39  18.07% intr{irq279: ix1:que }
   0 root       -92    0     0K   736K -       7  19:27  17.48% kernel{ix0 que}
   0 root       -92    0     0K   736K -       2  16:44  17.29% kernel{ix0 que}
  12 root       -92    -     0K   960K RUN     7  10:18  16.06% intr{irq280: ix1:que }
  11 root       155 ki31     0K   128K RUN     7   6:17  15.97% idle{idle: cpu7}
   0 root       -92    0     0K   736K -       7  18:37  14.60% kernel{ix0 que}
  11 root       155 ki31     0K   128K RUN     6   5:41  13.57% idle{idle: cpu6}
  11 root       155 ki31     0K   128K RUN     0   3:03   6.79% idle{idle: cpu0}
  11 root       155 ki31     0K   128K RUN     1   3:01   6.79% idle{idle: cpu1}
   0 root       -92    0     0K   736K -       7   8:30   6.30% kernel{ix0 que}

last pid:  2632;  load averages:  9.86, 12.85, 13.86                                                 up 0+01:07:01  21:16:11
197 processes: 21 running, 128 sleeping, 48 waiting
CPU 0:  0.0% user,  0.0% nice,  1.2% system, 57.3% interrupt, 41.5% idle
CPU 1:  0.0% user,  0.0% nice,  0.0% system, 67.7% interrupt, 32.3% idle
CPU 2:  0.0% user,  0.0% nice,  0.6% system, 64.0% interrupt, 35.4% idle
CPU 3:  0.0% user,  0.0% nice,  0.0% system, 69.5% interrupt, 30.5% idle
CPU 4:  0.0% user,  0.0% nice,  0.0% system, 67.7% interrupt, 32.3% idle
CPU 5:  0.0% user,  0.0% nice,  0.0% system, 75.6% interrupt, 24.4% idle
CPU 6:  0.0% user,  0.0% nice,  0.6% system, 62.2% interrupt, 37.2% idle
CPU 7:  0.0% user,  0.0% nice,  1.2% system, 48.8% interrupt, 50.0% idle
Mem: 514M Active, 96M Inact, 1002M Wired, 241M Buf, 6162M Free
Swap: 4096M Total, 4096M Free

 PID USERNAME   PRI NICE   SIZE    RES STATE   C   TIME    WCPU COMMAND
  11 root       155 ki31     0K   128K CPU6    6   6:36  57.47% idle{idle: cpu6}
  12 root       -92    -     0K   960K WAIT    5  27:54  54.20% intr{irq269: ix0:que }
  11 root       155 ki31     0K   128K RUN     7   7:16  53.66% idle{idle: cpu7}
  12 root       -92    -     0K   960K CPU4    4  28:27  50.29% intr{irq268: ix0:que }
  12 root       -92    -     0K   960K CPU2    2  28:49  49.27% intr{irq266: ix0:que }
  12 root       -92    -     0K   960K CPU0    0  30:04  46.97% intr{irq264: ix0:que }
  11 root       155 ki31     0K   128K RUN     0   3:43  45.75% idle{idle: cpu0}
  11 root       155 ki31     0K   128K RUN     1   3:42  45.65% idle{idle: cpu1}
  11 root       155 ki31     0K   128K RUN     3   3:32  45.65% idle{idle: cpu3}
  12 root       -92    -     0K   960K RUN     1  28:19  45.46% intr{irq265: ix0:que }
  12 root       -92    -     0K   960K CPU3    3  28:05  44.38% intr{irq267: ix0:que }
  11 root       155 ki31     0K   128K RUN     2   3:29  41.36% idle{idle: cpu2}
  12 root       -92    -     0K   960K WAIT    6  29:06  40.38% intr{irq270: ix0:que }
  12 root       -92    -     0K   960K CPU7    7  28:50  39.70% intr{irq271: ix0:que }
  11 root       155 ki31     0K   128K RUN     5   3:33  38.38% idle{idle: cpu5}
  11 root       155 ki31     0K   128K RUN     4   3:35  38.09% idle{idle: cpu4}
  12 root       -92    -     0K   960K RUN     2  20:28  13.09% intr{irq275: ix1:que }
  12 root       -92    -     0K   960K CPU1    1  18:29  11.67% intr{irq274: ix1:que }
  12 root       -92    -     0K   960K RUN     3  19:25  11.38% intr{irq276: ix1:que }
  12 root       -92    -     0K   960K CPU4    4  19:51  11.28% intr{irq277: ix1:que }
  12 root       -92    -     0K   960K CPU5    5  17:41  11.18% intr{irq278: ix1:que }
  12 root       -92    -     0K   960K RUN     0  16:18  10.16% intr{irq273: ix1:que }
  12 root       -92    -     0K   960K WAIT    7  10:47   7.47% intr{irq280: ix1:que }
  12 root       -92    -     0K   960K WAIT    6  12:11   7.28% intr{irq279: ix1:que }
   0 root       -92    0     0K   736K -       7  20:07   0.49% kernel{ix0 que}
   0 root       -92    0     0K   736K -       5  19:41   0.29% kernel{ix0 que}
   0 root       -92    0     0K   736K -       4  16:52   0.20% kernel{ix0 que}

            input          (ix0)           output
  packets  errs idrops      bytes    packets  errs      bytes colls
     369k     0     0       201M       324k     0        53M     0
     379k     0     0       208M       333k     0        56M     0
     369k     0     0       211M       319k     0        56M     0
     370k     0     0       210M       318k     0        54M     0
     376k     0     0       210M       323k     0        50M     0
     361k     0     0       202M       312k     0        50M     0
     369k     0     0       213M       313k     0        51M     0
     382k     0     0       212M       327k     0        49M     0
     372k     0     0       214M       318k     0        50M     0
     368k     0     0       204M       319k     0        52M     0
     352k     0     0       184M       309k     0        52M     0
     369k     0     0       200M       322k     0        50M     0
     372k     0     0       203M       323k     0        52M     0
     369k     0     0       207M       318k     0        52M     0
     375k     0     0       206M       324k     0        52M     0
     365k     0     0       201M       317k     0        52M     0
     364k     0     0       206M       314k     0        53M     0
     376k     0     0       212M       326k     0        52M     0
     370k     0     0       208M       318k     0        51M     0
     363k     0     0       207M       312k     0        52M     0
     370k     0     0       205M       315k     0        51M     0

Поделиться сообщением


Ссылка на сообщение
Поделиться на других сайтах

Стоял ipfw nat. Начались проблемы с загрузкой процессора по прерываниям на сетевухах.

Сервер 8ми ядерный (два проца).

Как не бился, хренос два. Проблема даже после тюнинга системы и сетевух осталась.

Но вдруг я перешёл на pf nat и о чудо.

Теперь в моём царстве мир и покой, а нагрузка на процессор не поднималась выше 12 процентов.

В среднем на уровне 8 процентов держится.

Поделиться сообщением


Ссылка на сообщение
Поделиться на других сайтах

Вот, когда включите PFsync и PFlog на FreeBSD 10.3 - так сразу начнутся чудеса.

Поделиться сообщением


Ссылка на сообщение
Поделиться на других сайтах

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Гость
Ответить в тему...

×   Вставлено в виде отформатированного текста.   Вставить в виде обычного текста

  Разрешено не более 75 смайлов.

×   Ваша ссылка была автоматически встроена.   Отобразить как ссылку

×   Ваш предыдущий контент был восстановлен.   Очистить редактор

×   Вы не можете вставить изображения напрямую. Загрузите или вставьте изображения по ссылке.