Florin Andrei wrote:

quoted text
>

> I expected OpenBSD 4.1 to do better. But the thing is, even without the

> UDP flood, the OpenBSD firewall is very slow. I am downloading a huge

> file through it, via HTTP, and all I get is 4 Mbyte / sec. With Linux I

> get 112 Mbyte / sec.

>

> Something's wrong. Or I'm doing something wrong.

Disabled all pf rules including NAT, now it's just "pass in ; pass out"

Now the download is able to saturate the gig ports, about 112 Mbyte / sec.

But it's still not constantly at 112, it sometime drops below that about

10%. When that happens, CPU0 has 0% idle cycles. A lot of interrupts,

always above 70% on CPU0, going to 99% when the download slows down.

The congestion counter is now 0.
The UDP flood still freezes the system solid (but I discovered that the

system clock continues to work more or less fine, it's just the text

console and the firewall that are not responsive).
I still can't match the performance I get from Linux. Any suggestion is

appreciated.
--

Florin Andrei
http://florin.myip.org/