On Friday 2012-03-02 12:52, Kerin Millar wrote: > On 02/03/2012 09:51, Roberto Suarez Soto wrote: >> we've got a load problem in a firewall we administer, and we >> believe it could be related to iptables. But we don't know for sure, and >> don't know either how to confirm or deny it. I'm quite at a loss, and >> would like to get the list's opinion/ideas/voodoo magic/hints on the >> issue. Thanks in advance! >> >> The symptoms are: >> >> - High ksoftirqd load in one CPU (the one assigned to the LAN >> ethernet's IRQ) > > For this issue, I've found that irqbalance works wonders. I recommend using > version 1.0 or greater and running it as a daemon. Better is irqd, which claims to have specific understanding of RPS/RFS/MQ. https://github.com/vaesoo/irqd -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html