DaemonForums  

Go Back   DaemonForums > OpenBSD > OpenBSD General

OpenBSD General Other questions regarding OpenBSD which do not fit in any of the categories below.

Reply
 
Thread Tools Display Modes
  #1   (View Single Post)  
Old 13th March 2015
NiCrAm NiCrAm is offline
New User
 
Join Date: Mar 2015
Posts: 2
Default Few questions from newbie

Hi,
First of all I'd like to say Hello to everybody. I'm new in OpenBSD so please bear with me. I've used debian so far and I wonder to change system to openbsd because of pf and carp.
I Have Dell R900 Server and I've installed vmware esxi 5.5 on it. I'd like to install OpenBSD as pppoe server (accel-pppd) and traffic sharper. But i've few doubts. When I used OpenBSD lastely it was about 10 years ago and this wasn't effective system, but very secured. Some people told me, that OpenBSD still has some imprtant defects, like pf doesn't work with multi procesors machine, it binds to one procesor and uses only it (my machine has 4 Xeons, 16 cores), and that not every good lan cards works like a charm :/
My target is to provide pppoe-server to 5000 users (now about 2k) with traffic conntrol and firewal/masquerade.
Can anybody tell me it is true about pf with multicore and lan cards? Does OpenBSD will be best choice for pppoe-server?

Nicram
Reply With Quote
  #2   (View Single Post)  
Old 13th March 2015
ocicat ocicat is offline
Administrator
 
Join Date: Apr 2008
Posts: 3,290
Default

Quote:
Originally Posted by NiCrAm View Post
Some people told me, that OpenBSD still has some imprtant defects, like pf doesn't work with multi procesors machine, it binds to one procesor and uses only it (my machine has 4 Xeons, 16 cores),
Welcome!

This topic has recently been discussed on misc@:

http://marc.info/?t=142429878000007&r=1&w=2

...& in particular, this response points that both networking & pf(4) are still limited to CPU0. If performance is a focus of yours, reading this thread (beginning with the first link above...) will be worthwhile reading.
Reply With Quote
  #3   (View Single Post)  
Old 14th March 2015
LeFrettchen's Avatar
LeFrettchen LeFrettchen is offline
Marveled user
 
Join Date: Aug 2012
Location: France
Posts: 304
Default

Wellcome NiCrAm

Quote:
Originally Posted by ocicat View Post
This topic has recently been discussed on misc@...)
Well, you can also find some informations about PF on the OpenBSD website :

http://www.openbsd.org/faq/pf/perf.html

Quote:
Will multiple processors help?
PF will only use one processor, so multiple processors (or multiple cores) WILL NOT improve PF performance. HOWEVER, under some circumstances, running the SMP version of OpenBSD (bsd.mp) instead of bsd will give better performance due to differences in how interrupt handling is done. In many cases, bsd.mp will give less performance. IF you are seeing performance problems, experiment with this, most users will never hit any limits to worry about it.
__________________
The secret of wisdom is not wisdom itself, it's the road that leads us there.
Reply With Quote
  #4   (View Single Post)  
Old 16th March 2015
NiCrAm NiCrAm is offline
New User
 
Join Date: Mar 2015
Posts: 2
Default

Ok, thanks for answers.
Reply With Quote
  #5   (View Single Post)  
Old 16th March 2015
rocket357's Avatar
rocket357 rocket357 is offline
Real Name: Jonathon
Wannabe OpenBSD porter
 
Join Date: Jun 2010
Location: 127.0.0.1
Posts: 429
Default

There seems to be a lot of interest surrounding SMP capabilities lately, which henning@ touched on here. Slide 33, in particular regarding your questions, but overall it looks like a good bit of effort has gone into SMP. In other words, it is on the roadmap, but not there yet.

Personally, I'm patient enough to wait for $feature to be coded carefully and deliberately rather than whipped together and forgotten in order to maintain feature parity with competing vendors.
__________________
Linux/Network-Security Engineer by Profession. OpenBSD user by choice.
Reply With Quote
  #6   (View Single Post)  
Old 16th March 2015
Oko's Avatar
Oko Oko is offline
Rc.conf Instructor
 
Join Date: May 2008
Location: Kosovo, Serbia
Posts: 1,102
Default

Quote:
Originally Posted by NiCrAm View Post
pf doesn't work with multi procesors machine, it binds to one procesor and uses only it (my machine has 4 Xeons, 16 cores), and that not every good lan cards works like a charm :/
That topic has been beaten up to death on FreeBSD, pfSense, DragonFly, and OpenBSD mailing lists. FreeBSD has 5 year old version which is optimized for multi core machines. It is defacto a fork of the obsolete version of PF. "Rumors" are that version is much slower that new rewritten version of PF which can make a use only of one core. In spite the fact that FreeBSD might soon decide to remove PF all together in favor of native IPFW in part due to the fact that it is stuck with bunch of PF bugs, DragonFly people decided to do their own multi core optimization. Their version of PF is similar if not older than FreeBSD. I personally would look for Henning Brauer posts and discussions in particularly with Luigi (IPFW guy) from FreeBSD camp. It is pretty revealing why the decision to stick to one core was made early on and why OpenBSD people are so reluctant to implement multicore PF. Whole this discussion of mitlicore PF version vs new OpenBSD version also revels and important truth about PF. It is not very portable and it has always been written to work on OpenBSD.


I think you will be fine with OpenBSD regardless of this academic discussion we are having now. Now if you have 20 Gigabit or 50 Gigabit network I would be first one to tell you that OpenBSD might not be the right OS for you (at least not yet).
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
OpenBSD Newbie! Majorix OpenBSD General 13 18th July 2013 10:14 PM
returning newbie questions jimbus FreeBSD Installation and Upgrading 6 22nd June 2012 02:19 AM
PF Configuration for newbie slakic OpenBSD Security 1 20th August 2009 02:35 PM
Newbie NAT problem TiN-MAN FreeBSD Installation and Upgrading 2 26th June 2008 06:42 AM


All times are GMT. The time now is 10:20 PM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2018, Jelsoft Enterprises Ltd.
Content copyright © 2007-2010, the authors
Daemon image copyright ©1988, Marshall Kirk McKusick