stress test

Further stress tests.

System setup
P4 3GHZ, 1GB RAM, 160GB SATA drive, 3 nic's
3000/800 DSL connection, static IP, no throttling on the ISP's side.

Previous (Sonicwall, with port forward rules) firewall stress tests have show the connection downloading at a full 2Mb/s

Simple firewall rules, Intrusion protection and SSL remote access enabled (all AV components disabled), one masquarading rule and one port filter rule enabled.

Speed test:
Loaded up uTorrent to check out CPU usage and throughput. Proceeded to download the DVD ISO of Fedora Core 6 (Zod).

Max DL speed noticed: 450Kb/s
Max UL speed noticed: 70Kb/s

During the test a few things went wrong:
All other internet traffic stopped, I could not access anything web related
The web Management interface stopped responding completely ("server not responding" error).

Once the download was complete, internet access and the web management returned to normal.

The plan was to open ports and test again, however with the web management down I had no access to the CPU usage, etc....

More on this after further testing.

Parents

0 Atticka over 18 years ago

Further testing confirmed this....

I opened the console befor starting the download of Ubuntu 6.10 (again with uTorrent), the CPU usage went to %32 befor the dashboard would no longer respond and MSN lost connection.

The torrent however started downloading as normal at 2Kb/s.

Once I shut the torrent down, connection returned and CPU usage dropped.

Further information on the hardware:
P4 3GHZ with HT enabled
Onboard Broadcom gigabit NIC as LAN connection
DLINK 10/100 PCI NIC for WAN connectivity

Running Astaro 6.908 (V7 Beta)
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 RFCat_vk_01 over 18 years ago in reply to Atticka

Atticka,
I would suggest you might have hardware conflicts in your test box.
I have downloaded cd isos of Mandriva 2007 using a 8000(4500 in reality)/384 and didn't have any problems.
The kids who give a number of gaming sites a hard time didn't complain let alone even notice and the link was saturating.
I don't have that link speed anymore so I can't repeat the test.

My box is not as powerful as yours and has many complex timing rules with most proxies running.

Ian M[;)][:)]
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Atticka over 18 years ago in reply to RFCat_vk_01

I was considering this.....

What I'll do is pick up some Intel PCI NIC's and disable the onboard NIC.

Disable Hyper Threading.
Disable any other onboard devices not needed for the firewall functionality.

That should solve any potential hardware issue's.....thats the hard part, it could be a number of things.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 RFCat_vk_01 over 18 years ago in reply to Atticka

Atticka,
I would suspect the DLink card.

I use a an Intel card and a Realtek 8139 based card. The Realtek talks to the WAN and the Intel internal.
Check to see that auto negotiate is enabled, you do this in the
network -> interfaces -> edit.

Ian M[[[:)]]][[[:)]]][[[:)]]]
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Atticka over 18 years ago in reply to RFCat_vk_01

I was looking at getting a pair of Intel PRO 1000 GT adapters
MFG#PWLA8391GT

Details here
http://www.intel.com/network/connectivity/products/pro1000gt_desktop_adapter.htm

Now, if all else fails I have an extra Intel motherboard and a Intel Core 2 DUO chip laying around that would make a nice little firewall (overkill! I know, lol).
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 Atticka over 18 years ago in reply to RFCat_vk_01

I was looking at getting a pair of Intel PRO 1000 GT adapters
MFG#PWLA8391GT

Details here
http://www.intel.com/network/connectivity/products/pro1000gt_desktop_adapter.htm

Now, if all else fails I have an extra Intel motherboard and a Intel Core 2 DUO chip laying around that would make a nice little firewall (overkill! I know, lol).
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

No Data