Slow throughput

[Guest]

[Danoh]

I'm pulling my hair out trying to trouble shoot this.  Any ideas are welcome.

EFW 2.5.1 community  running on an intel i5 (4 cpus shown) @ 2.8 Ghz with 2Gb of memory.

At all times, there's at least 1 Gb of memory free.  This EFW serves as a NAT/Firewall for a few servers and 7 end users.

I have a 100/100Mbit internet connection.

I have 2 onboard gig Intel NICs which are 82574L , and a 4 port gig ethernet card which is a realtek RTL8111/8168B

My internet throughput through the Endian is terrible.  Directly connected to the ISP, bypassing the endian, I get 85+Mbit/s down and 80+Mbit/s up - connected through the endian I get 40Mbit/s down and 20Mbit/s up.

I am not running anything extra.  No intrusion detection, no Proxy, no outbound firewall.  I have 18 port forwarding rules, and 6 source nat rules. VPN is not enabled.

I have swapped the RED interface to different ethernet ports, no help.  I have swapped GREEN interface to different ethernet ports, no help.  I have used various sysctl settings found to optimize and tune the TCP stacks, no help. All NICs are linked at 1000Mbit/s Full Duplex, per ethtool.

During a speed test, the CPU usage seen in "top" is not even being touched.  The interrupts are almost nothing. This isn't a CPU issue as far as I can tell.

Does anyone have any idea whats going on, and what I can do to further test and fix this?

[Danoh]

Forgot to mention, no QoS is enabled.

[Danoh]

More information:

I used a free ip on a Juniper SSG140 with the same network cabling and the speed tests showed 75Mbit up and 86Mbit down

Definately has something to do with the Endian.

Ideas?

[Danoh]

Nobody? 

[Danoh]

Can someone, maybe an EFW community developer, compile the latest Intel e1000e.ko module for EFW 2.5.1?  I'll try that.  I tried two off of elrepo but it did not work with the 2.5.1 kernel.

My currnet e1000e.ko is:
filename:       /lib/modules/2.6.32.43-57.e43.i586/kernel/drivers/net/e1000e/e1000e.ko.gz
version:        1.0.2-k2

But Intel has version 2.2.14 out now.

Here's the link to the source: http://downloadcenter.intel.com/Detail_Desc.aspx?DwnldID=15817

[robert]

I rebuilt the e1000e RPMs using the latest tar and placed them in my update repositories.

The update repository is described in this thread: http://www.efwsupport.com/index.php?topic=3602.0

[Danoh]

I have your channels active for smart and was able to get the e1000e.ko for version 1.3.10a-NAPI working fine.  It didn't make any difference in my throughput issue though.

I removed it and installed from updates repo the 2.2.14 version, but I could not locate the updated e1000e.ko kernel module.  In order to get it from the updates repo, I made ossw-release priority of -50

Is there something I was doing wrong not to be able to find the 2.2.14 version of e1000e.ko?

Regardless, the throughput issue with a newer (not latest) intel e1000e driver didn't fix my issue.

Anyone have any other ideas?  I'd like to get the latest e1000e driver working just to absolutely rule that out as an issue.

[robert]

I think you want to install kernel-module-e1000e package.

[Danoh]

Ok that did it, thanks so much for helping with that driver!

filename:       /lib/modules/2.6.32.43-57.e43.i586/kernel/drivers/net/e1000e/e1000e.ko.gz
version:        2.2.14-NAPI

Now we can rule out the e1000e driver as the issue.  I figured that wasn't the issue because I have already swapped both GREEN and RED over to a Realtek card with the same throughput issue.  I wanted to be 100% sure I was using the latest drivers though to rule that out.

I'm still getting TERRIBLE throughput from GREEN to RED.

I even went so far yesterday as to load up a fresh Endian 2.5.1 with no firewall rules whatsoever - straight out of the box running on a xeon 2.5 ghz quad core with 4 gb of memory - and have the exact same throughput issue.

Anyone have any ideas?

[Danoh]

swapped all the memory in the efw for new memory

same slow throughput

anyone have any ideas?

[Danoh]

160+ views of this and only one person has even attempted to help me. 

[Danoh]

Anyone?

[Danoh]

Hello? Anyone?

[dda]

Well i noticed the same thing but I have no answer unfortunately.

[Danoh]

Installed clearos community and I get the full bandwidth with no issues.  What's up Endian?  Am I going to have to use another firewall because Endian can't handle the speed or what?