netdev - fedora 14 kernel performance with ip forwarding workload

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:	Wed, 6 Apr 2011 11:51:06 -0700
From:	Jesse Brandeburg <jesse.brandeburg@...il.com>
To:	fedora-kernel-list@...hat.com
Cc:	Jesse Brandeburg <jesse.brandeburg@...el.com>,
	NetDEV list <netdev@...r.kernel.org>
Subject: fedora 14 kernel performance with ip forwarding workload

The other day I was running the stock fedora kernel on my ip
forwarding setup, to see what the performance was, and the performance
wasn't very good.

system is S5520HC dual socket 2.93GHz Xeon 5570 (Nehalem) with 3 quad
port 82580 adapters (12 ports).  Traffic is bidirectional 64 byte
packets being forwarded and received on each port, basically port to
port routing.  I am only using 12 flows currently.

The driver is igb, and I am using an affinity script that lines up
each pair of ports that are forwarding traffic into optimal
configurations for cache locality.  I am also disabling
remote_node_defrag_ratio to stop cross node traffic.

With the fedora default kernel from F14 it appears that
CONFIG_NETFILTER=y means that I cannot unload all of netfilter even if
I stop iptables service.

perf showed netfilter being prominent, and removing it gives me much
higher throughput.  Is there a reason CONFIG_NETFILTER=y ?  Isn't it a
good thing to be able to disable netfilter if you want to?

Jesse
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html