On 09.11.2014 06:15, Stig Thormodsrud wrote: > On 09.11.2014 01:49, Yucong Sun wrote: >> Dennis Jacobfeuerborn <dennisml@xxxxxxxxxxxx> >> >> The EdgeRouter 's asic couldn't handle all use cases , Having some >> special rule will make it go to "offload" disabled mode. You should >> research if that's the problem. > > I'm a developer on this product. I'd be interested in the test cases > that it couldn't handle. This isn't a test case the system is already in live use. We are only using zone based firewalling, NAT and network/port groups so basically just iptables+ipset and a couple of vlan interfaces. In its default configuration both cpus are pegged at 95% soft-irq usage. Enabling vlan offloading reduces that quite a bit...but apparently make the system reboot itself about once every two days. Right at this moment on the wan interface I see 34.273 rx pps and 57.232 tx pps which is going to increase a bit in the coming hours but gives a good picture about the the system has to handle right now. Regards, Dennis -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
