Re: 10GE router resource

[Patrick Clochesy <patrick () chegg com>]

Very interesting study I had not seen, and a bummer. That really puts a cramp in my advocation of our CARP+pf load 
balancers/firewalls/gateways. Than again, what's a PIX box capable of? 

I also had to switch to OpenBSD as there was a fatal crash with the bridge device in FreeBSD when used with my 
paticular OpenVPN/CARP/pf combination. 

AFAIK pf/forwarding only takes place on one core and wouldn't take advantage of the other 3 cores, correct? 

-Patrick 

----- Original Message ----- 
From: "Adrian Chadd" <adrian () creative net au> 
To: "Chris Grundemann" <cgrundemann () gmail com> 
Cc: "William Herrin" <herrin-nanog () dirtside com>, nanog () nanog org 
Sent: Tuesday, March 25, 2008 6:02:03 PM (GMT-0800) America/Los_Angeles 
Subject: Re: 10GE router resource 


On Tue, Mar 25, 2008, Chris Grundemann wrote: 

> To Ann's question on resources; I have only used Linux routers with 1G 
> ports but have surpassed 10G total throughput (up+ down) using various 
> dual proc set ups, most often Intel Xeon in Dell servers. A gentlemen 
> by the name of Martin Pels wrote a good paper on the subject early 
> last year that can be found here: 
> http://docs.rodecker.nl/10-GE_Routing_on_Linux.pdf. He hit a wall at 
> 700K pps and was using two dual core Intel Xeon 64bit 2.33GHz CPUs and 
> 2GB of RAM in a Dell PowerEdge 1950. 

Mike Tancsa did some benchmarking in late 2006: 

http://www.tancsa.com/blast.html 

I think things are slightly faster now but not because of a massive 
change in software architecture. 




Adrian