Concurrent Sessions/Sessions per second

Concurrent Sessions/Sessions per second

[Usuário do Sistema]

Hello everyone,


anyone help me how can I figure out the follows value in my Linux box ?

Max Concurrent Session

New Sessions per second

they are related with CPU of the machine ?

there is any way how to figure out how many connections are through
my firewall iptables ?

any tip is welcome

thanks

Re: Concurrent Sessions/Sessions per second

[Pablo Neira Ayuso]

Hi,

On Thu, Dec 27, 2012 at 03:17:04PM -0200, Usuário do Sistema wrote:
> Hello everyone,
> 
> anyone help me how can I figure out the follows value in my Linux box ?
> 
> Max Concurrent Session
> New Sessions per second
> 
> they are related with CPU of the machine ?

CPU and other hardware aspects are important. But there several
configuration parameters (like using the irqbalance daemon, tweaking
the conntrack table) and they make a difference.

I suggest you a read of the evaluation part of these articles:

http://1984.lsi.us.es/~pablo/docs/intcomp09.pdf
http://people.netfilter.org/kadlec/nftest.pdf

Another important thing while benchmarking is that you have to make
sure that neither your client nor your benchmark server become the
bottleneck. Otherwise, you end up getting misleading benchmarking
results.

> there is any way how to figure out how many connections are through
> my firewall iptables ?

You can obtain the maximum sessions/s by generating lots of well small
connections, ie. assuming TCP, 3-way handshake and then immediately
tearing down the connection.

For the client side, you can probably check this utility, it generates
plain HTTP requests:

http://1984.lsi.us.es/git/http-client-benchmark/

For the server side, I suggest you to grab Willy Tarreau's httpterm:

http://1wt.eu/tools/httpterm/

I have tried many other utilities in the past, but those are my
favorite ones so far.

Re: Concurrent Sessions/Sessions per second

[Eliezer Croitoru]

It depends on a lot of stuff...
if you are using connection tracking in your IPTABLES it will reduce the 
number of open connections your machine can handle.

if you will use DEEP INSPECTION modules it will handle even less.

In most cases a nice and modern PC(not a server) can handle more then 
100k connections with any trouble.
but this is about IPTABLES...
if you have applications on your server it's another thing.

With a nice 8 cores 16gb Server you can max it with a proxy on it to 
about 30M connections with no trouble at all.

Regards,
Eliezer

On 27/12/2012 19:17, Usuário do Sistema wrote:
> Hello everyone,
>
>
> anyone help me how can I figure out the follows value in my Linux box ?
>
> Max Concurrent Session
>
> New Sessions per second
>
> they are related with CPU of the machine ?
>
> there is any way how to figure out how many connections are through
> my firewall iptables ?
>
> any tip is welcome
>
> thanks
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>