[ previous ] [ next ] [ threads ]
 From:  "Jeroen Visser" <monowall at forty dash two dot nl>
 To:  "Jurgen van Vliet" <jurgenvv at xs4all dot nl>, <m0n0wall at lists dot m0n0 dot ch>
 Subject:  Re: [m0n0wall] Performance with many concurrent connections trough trafficshaper
 Date:  Fri, 5 May 2006 12:14:11 +0200

Currently I'm running m0n0wall as a firewall for 1500+ workstations. Trafficshaper
is enabled (almost the default setting from the shaper wizard) to put P2P traffic
on the lowest of priorities. I have not run into any memory problems sofar, but I
cannot tell you how many connections there are. Must be a lot, because I've got
600+ homeusers in the 1500+ pool.

The firewall is a pentium4 CPU with 512 MB memory, all Intel NICs. I had the
kern.ipc.nmbclusters=32768, but this was not nessecary. (lost the settings after
an upgrade). Memory usage never was above 25% (manual checks only), it is
currently at 8%. I cannot graph the memory usage, don't know why yet.

See some graphs here....
Traffic: http://img66.imageshack.us/img66/8356/trafficinternet9oi.png
CPU: http://img226.imageshack.us/img226/4025/cpuusage5cp.png

Oh and I user version 1.22 by the way.

Jeroen Visser

On Fri, 5 May 2006 09:25:26 +0200, Jurgen van Vliet wrote
> Hi Folk,
> Im wondering if anyone has some real life experience with using m0n0wall 
> for *many* concurrent connections trough trafficshaper. The machine I am 
> going to run it on is a pentium 4 celeron , 256 Mb mem, Intel Gb nics.
> The idea is to use it for an wireless isp that is expecting thousands of
> users, so im wondering how many concurrent sessions I can run trough the
> m0n0wall with traffic shaper enabled without running into problems like
> memory buffers orso.
> I am allready planning to use the /boot/loader.rc setting set
> kern.ipc.nmbclusters=32768 and version 1.22 of m0n0wall.
> Any experience or benchmark results welcome :)
> Regards,
> Jurgen van Vliet
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch