I have a 486DX50 firewall that has been serving me well for a number of
years. I recently upgraded it fro 5.4 to 6.0 and performance plumeted
rather drastically (about 40%). I would like to fix it. What I have
noticed is that even when sitting idle the system spends ~20% of its
time in interrupt. Below I have included dmesg, kernel config, and
vmstat -i information.
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights
reserved.
FreeBSD 6.0-RELEASE-p4 #0: Thu Feb 16 09:42:52 UTC 2006
root@mumble:/usr/obj/usr/src/sys/PHOENIX
WARNING: debug.mpsafenet forced to 0 as ipsec requires Giant
WARNING: MPSAFE network stack disabled, expect reduced performance.
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: i486DX (486-class CPU)
real memory = 33554432 (32 MB)
avail memory = 27672576 (26 MB)
npx0: [FAST]
npx0: <math processor> on motherboard
npx0: INT 16 interface
cpu0 on motherboard
isa0: <ISA bus> on motherboard
orm0: <ISA Option ROMs> at iomem 0xc0000-0xc7fff,0xdc000-0xdffff on isa0
aha0 at port 0x330-0x333 irq 15 drq 6 on isa0
aha0: AHA-1540/1542 64 head BIOS FW Rev. 0.8 (ID=41) SCSI Host Adapter,
SCSI ID 7, 16 CCBs
aha0: [GIANT-LOCKED]
ep0: <3Com 3C509-Combo EtherLink III> at port 0x310-0x31f irq 10 on isa0
ep0: Ethernet address: 00:20:af:11:11:11
ep0: [GIANT-LOCKED]
ep1: <3Com 3C509-TPO EtherLink III> at port 0x320-0x32f irq 11 on isa0
ep1: Ethernet address: 00:20:af:22:22:22
ep1: [GIANT-LOCKED]
ep2: <3Com 3C509-TPO EtherLink III> at port 0x340-0x34f irq 12 on isa0
ep2: Ethernet address: 00:20:af:33:33:33
ep2: [GIANT-LOCKED]
ata0 at port 0x1f0-0x1f7,0x3f6 irq 14 on isa0
fdc0: <Enhanced floppy controller> at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2
on isa0fdc0: [FAST]
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 16450, console
sio1 at port 0x2f8-0x2ff irq 3 on isa0
sio1: type 16450
sio2 at port 0x3e8-0x3ef irq 5 on isa0
sio2: type 16550A
sio3 at port 0x2e8-0x2ef irq 9 on isa0
sio3: type 16550A
sbc0: <Creative SB AWE64> at port 0x220-0x22f,0x300-0x301,0x388-0x38b
irq 7 drq 0,5 on isa0
sbc0: [GIANT-LOCKED]
pcm0: <SB16 DSP 4.16> on sbc0
pcm0: [GIANT-LOCKED]
Timecounters tick every 1.000 msec
IPv6 packet filtering initialized, unlimited logging
IPsec: Initialized Security Association Processing.
ipfw2 (+ipv6) initialized, divert loadable, rule-based forwarding
disabled, default to deny, logging unlimited
Waiting 5 seconds for SCSI devices to settle
acd0: CDROM <CD-ROM CDR S18/1.02> at ata0-master PIO3
da0 at aha0 bus 0 target 0 lun 0
da0: <IBM DORS-32160 !# WA1A> Fixed Direct Access SCSI-2 device
da0: 5.000MB/s transfers (5.000MHz, offset 7)
da0: 2063MB (4226725 512 byte sectors: 64H 32S/T 2063C)
Trying to mount root from ufs:/dev/da0s1a
interrupt total rate
irq0: clk 203894894 1000
irq4: sio0 12447 0
irq5: sio2 4569524 22
irq6: fdc0 1 0
irq7: sbc0 1 0
irq8: rtc 26091825 127
irq10: ep0 3392620 16
irq11: ep1 109748 0
irq12: ep2 63506 0
irq13: npx0 1 0
irq14: ata0 75 0
irq15: aha0 102475 0
Total 238237117 1168
machine i386
cpu I486_CPU
ident PHOENIX
#makeoptions DEBUG=-g # Build kernel with gdb(1) debug
symbols
#options SCHED_ULE # ULE scheduler
options INCLUDE_CONFIG_FILE
options SCHED_4BSD # 4BSD scheduler
options PREEMPTION # Enable kernel thread
preemption
options INET # InterNETworking
options INET6 # IPv6 communications protocols
options FFS # Berkeley Fast Filesystem
options SOFTUPDATES # Enable FFS soft updates
support
options UFS_ACL # Support for access control
lists
options UFS_DIRHASH # Improve performance on big
directoriesoptions NFSCLIENT # Network Filesystem
Client
options CD9660 # ISO 9660 Filesystem
options PROCFS # Process filesystem (requires
PSEUDOFS)options PSEUDOFS # Pseudo-filesystem
framework
options GEOM_GPT # GUID Partition Tables.
options COMPAT_43 # Compatible with BSD 4.3 [KEEP
THIS!]
options COMPAT_FREEBSD4 # Compatible with FreeBSD4
options COMPAT_FREEBSD5 # Compatible with FreeBSD5
options SCSI_DELAY=5000 # Delay (in ms) before probing
SCSI
options KTRACE # ktrace(1) support
options SYSVSHM # SYSV-style shared memory
options SYSVMSG # SYSV-style message queues
options SYSVSEM # SYSV-style semaphores
options _KPOSIX_PRIORITY_SCHEDULING # POSIX P1003_1B real-time
extensions
options KBD_INSTALL_CDEV # install a CDEV entry in /dev
options ADAPTIVE_GIANT # Giant mutex is adaptive.
options AUTO_EOI_1
options AUTO_EOI_2
options IPFIREWALL
options IPFIREWALL_VERBOSE
options IPV6FIREWALL
options IPV6FIREWALL_VERBOSE
options IPDIVERT
options DUMMYNET
options IPSEC
options IPSEC_ESP
options PPS_SYNC
# Floppy drives
device fdc
# ATA and ATAPI devices
device ata
device atapicd # ATAPI CDROM drives
options ATA_STATIC_ID # Static device numbering
#SCSI Controllers
device aha # Adaptec 154x SCSI adapters
# SCSI peripherals
device scbus # SCSI bus (required for SCSI)
device da # Direct Access (disks)
device pass # Passthrough device (direct SCSI
access)
device ses # SCSI Environmental Services (and
SAF-TE)
# Serial (COM) ports
device sio # 8250, 16[45]50 based serial ports
# Parallel port
#device ppc
#device ppbus # Parallel port bus (required)
#device lpt # Printer
#device plip # TCP/IP over parallel
#device ppi # Parallel port interface device
#device vpo # Requires scbus and da
device ep # Etherlink III based cards
# Pseudo devices.
device loop # Network loopback
device random # Entropy device
device ether # Ethernet support
device tun # Packet tunnel.
device pty # Pseudo-ttys (telnet etc)
device md # Memory "disks"
#device gif # IPv6 and IPv4 tunneling
#device faith # IPv6-to-IPv4 relaying (translation)
# The `bpf' device enables the Berkeley Packet Filter.
# Be aware of the administrative consequences of enabling this!
# Note that 'bpf' is required for DHCP.
device bpf # Berkeley packet filter
device sound
device snd_sbc
device snd_sb16
Any ideas/suggestions?
--
David E. Cross