BCE lenta in un verso (se genera traffico)

Gianmarco Giovannelli gmarco a gufi.org
Ven 16 Dic 2011 19:12:51 CET


At 01:22 16/12/2011, Riccardo Torrini wrote:
 >Ho montato il firewall nuovo (secondo tentativo), ho messo
 >bce0=lan, bce1=wan, em0=dmz, em1=free (per ora)...
 >
 >bce0: <Broadcom NetXtreme II BCM5709 1000Base-T (C0)> mem
 >0x92000000-0x93ffffff irq 28 at device 0.0 on pci11
 >brgphy0: <BCM5709 10/100/1000baseT PHY> PHY 1 on miibus0
 >brgphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT,
 >1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto, auto-flow
 >bce0: ASIC (0x57092003); Rev (C0); Bus (PCIe x2, 5Gbps); B/C (5.2.3);
 >Bufs (RX:2;TX:2;PG:8); Flags (SPLT|MSI|MFW); MFW (NCSI 2.0.10)
 >Coal (RX:6,6,18,18; TX:20,20,80,80)
 >
 >bce1: <Broadcom NetXtreme II BCM5709 1000Base-T (C0)> mem
 >0x94000000-0x95ffffff irq 40 at device 0.1 on pci11
 >brgphy1: <BCM5709 10/100/1000baseT PHY> PHY 1 on miibus1
 >brgphy1:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT,
 >1000baseT-master, 1000baseT-FDX, 1000baseT-FDX-master, auto, auto-flow
 >bce1: ASIC (0x57092003); Rev (C0); Bus (PCIe x2, 5Gbps); B/C (5.2.3);
 >Bufs (RX:2;TX:2;PG:8); Flags (SPLT|MSI|MFW); MFW (NCSI 2.0.10)
 >Coal (RX:6,6,18,18; TX:20,20,80,80)
 >
 >em0: <Intel(R) PRO/1000 Network Connection 7.2.3> port 0x2020-0x203f
 >mem 0x97a60000-0x97a7ffff,0x97a40000-0x97a5ffff irq 24 at device 0.0 on pci21
 >em0: Using an MSI interrupt
 >
 >em1: <Intel(R) PRO/1000 Network Connection 7.2.3> port 0x2000-0x201f
 >mem 0x97a20000-0x97a3ffff,0x97a00000-0x97a1ffff irq 34 at device 0.1 on pci21
 >em1: Ethernet address: 00:1b:21:99:a6:0f
 >
 >Il traffico in/out verso la lan e verso la dmz e` stabile
 >sui 10.5-11MB/sec (switch 100 full-duplex) ma verso internet
 >scarico a 10.8 da unina (ftp.it.freebsd.org) ma non esco a
 >piu` di 20-30kB (sembra che parta forse e dopo pochi secondi
 >rallenta e va in stallo).
 >

Ehm ... avevo un problema simile ... me lo ha risolto dave :-)
Ma qui non dico cosa era neppure con una pistola alla testa :-))

Prova a disabilitare il nat e fai la prova senza nat (se questo e' 
una combo ipfw + natd ).




Best Regards,
Gianmarco Giovannelli ,  "Unix expert since yesterday"
http://utenti.gufi.org/~gmarco/



Maggiori informazioni sulla lista Esperti