Darren
Thanks a lot for your response. Can you advice what and how I shall
check on OS side to confirm that pfil performance is optimal ?
Also do you find DEBUG options possible cause of the problem as stated
by Andrew ?
With best regards
Martynas
-----Original Message-----
From: Darren Reed [mailto:darrenr@reed.wattle.id.au]
Sent: Wednesday, February 14, 2007 7:51 AM
To: Buozis, Martynas
Cc: ipfilter@coombs.anu.edu.au
Subject: Re: pfil and network performance
Buozis, Martynas wrote:
> Hello
>
> I am running IPFilter installation on Solaris 8 (Generic_117350-41).
> PFIL version is 2.1.11,REV=10:54:27 11/16/06.
>
> We noticed, that PFIL is causing big impact to network performance
even
> when IPFilter is stopped (just PFIL is loaded) and no rules are
present.
> 2GB file copy from NFS server took 35 minutes with PFIL loaded, while
> without PFIL only 3 minutes were required to copy same file.
>
> Can somebody advice were problem is with PFIL ?
>
It shouldn't cause performance to drop this much...sounds like something
is going wrong.
The pfil module will stop any performance improvements due to hardware
features
such as checksum offload being activated.
Darren
|