Perfomance problem on MIPS

Perfomance problem on MIPS

[art]

Hello all,

I have some problem with using iptables:
I work with Infineon ADM5120 SOC. It has MIPS32 4KC processor(200MHz),
embedded ADM5120 switch (with 4 100Mbit interfaces).
I get embedded Linux OS work on it.
I test network bandwidth without iptables enabled in kernel - result
80Mbit/s.
When I enable Connection tracking (I need NAT) & iptables and test
WITOUT ANY RULES - bandwidth was near 35-40Mbi/s.
Then I make several tests and find that most bandwidth reduction
occurs when enabling Connection tracking.

It's wery upset fact. What can be done with this? Can I get version
where NAT not depend on Connection tracking?



  

-- 
Best regards,
 art                          mailto:art@sigrand.ru

Re: Perfomance problem on MIPS

[lst_hoe01]

Zitat von art <art@sigrand.ru>:

> Hello all,
>
> I have some problem with using iptables:
> I work with Infineon ADM5120 SOC. It has MIPS32 4KC processor(200MHz),
> embedded ADM5120 switch (with 4 100Mbit interfaces).
> I get embedded Linux OS work on it.
> I test network bandwidth without iptables enabled in kernel - result
> 80Mbit/s.
> When I enable Connection tracking (I need NAT) & iptables and test
> WITOUT ANY RULES - bandwidth was near 35-40Mbi/s.
> Then I make several tests and find that most bandwidth reduction
> occurs when enabling Connection tracking.
>
> It's wery upset fact. What can be done with this? Can I get version
> where NAT not depend on Connection tracking?

For performance see

http://people.netfilter.org/kadlec/nftest.pdf

For NAT without conntrack use NOTRACK or disable connection tracking at all.

Regards

Andreas

Re: Perfomance problem on MIPS

[Philip Craig]

On 06/01/2006 05:46 PM, lst_hoe01@kwsoft.de wrote:
> Zitat von art <art@sigrand.ru>:
>> It's wery upset fact. What can be done with this? Can I get version
>> where NAT not depend on Connection tracking?
> 
> For performance see
> 
> http://people.netfilter.org/kadlec/nftest.pdf
> 
> For NAT without conntrack use NOTRACK or disable connection tracking at all.

You cannot use the standard kernel NAT without connection tracking.

It should be possible to write some stateless mangle targets that
can do simple address rewriting if that is all you need (this is the
equivalent of what the fast nat in 2.2 and 2.4 kernels did).

But if you need many to 1 NAT, or complex protocols such as FTP,
then you must use connection tracking.

Perfomance problem on MIPS

[art]

Hello all!
      I work with processor: MIPS 4KC.
      I check network performance without iptables & conntrac enabled
      and it has near 80Mbit/s.
      When I enable (without adding rules) network performance was
      near 40Mbit/s.
      While testing ksoftirqd is get near 50% of cpu. And (it is so
      strange) top eats the same! However cpu has 100% load and
      perfomance is real bad.
      Has anybody same problem?
  

-- 
Best regards,
 art                          mailto:art@sigrand.ru

Re: Perfomance problem on MIPS

[art]

Hello art,

Monday, June 05, 2006, 2:43:47 PM, you wrote:

a> Hello all!
a>       I work with processor: MIPS 4KC.
a>       I check network performance without iptables & conntrac enabled
a>       and it has near 80Mbit/s.
a>       When I enable (without adding rules) network performance was
a>       near 40Mbit/s.
a>       While testing ksoftirqd is get near 50% of cpu. And (it is so
a>       strange) top eats the same! However cpu has 100% load and
a>       perfomance is real bad.
a>       Has anybody same problem?
  
I mistype: with iptables&conntrack perfomance only 30Mbit/s



-- 
Best regards,
 art                            mailto:art@sigrand.ru

Re: Perfomance problem on MIPS

[art]

Kernel 2.6.16 from linux-mips.org
a>> Hello all!
a>>       I work with processor: MIPS 4KC.
a>>       I check network performance without iptables & conntrac enabled
a>>       and it has near 80Mbit/s.
a>>       When I enable (without adding rules) network performance was
a>>       near 40Mbit/s.
a>>       While testing ksoftirqd is get near 50% of cpu. And (it is so
a>>       strange) top eats the same! However cpu has 100% load and
a>>       perfomance is real bad.
a>>       Has anybody same problem?
  







-- 
Best regards,
 art                            mailto:art@sigrand.ru

Re: Perfomance problem on MIPS

[Ralf Baechle]

On Mon, Jun 05, 2006 at 02:43:47PM +0700, art wrote:

> Hello all!
>       I work with processor: MIPS 4KC.
>       I check network performance without iptables & conntrac enabled
>       and it has near 80Mbit/s.
>       When I enable (without adding rules) network performance was
>       near 40Mbit/s.
>       While testing ksoftirqd is get near 50% of cpu. And (it is so
>       strange) top eats the same! However cpu has 100% load and
>       perfomance is real bad.
>       Has anybody same problem?

Just loading the connection tracking module will pull networking
performance into a deep hole, no surprise there.  All your numbers are on
the low side though.  What clock rate is your CPU running?

  Ralf