[GTER] Hardware ServerU L-100 / L-800

[Patrick Tracanelli]

> On 24/02/2015, at 19:25, casfre at gmail.com wrote:
> 
> 2015-02-24 17:36 GMT-03:00 Eduardo Meyer <dudu.meyer at gmail.com>:
> 
>> 2015-02-24 16:41 GMT-03:00 Jonatas M. Victor <jonatasmv at gmail.com>:
>> 
>>>  Srs,
>>> 
>>>   Alguém já utilizou esse hardware para aplicações de roteamento? Qual a
>>> impressão
>>> de atendimento pré e pós venda, garantia e no funcionamento no dia-a-dia
>> ?
>>> 
>>>  Obrigado,
>>> 
>> 
>> eu tenho rodado pra BGP, firewall e IDS ambas L100 e L800
>> 
> 
> Há alguma dessas situações de firewall onde tenha muitas regras (+200 por
> exemplo) e com conntrack (ou correspondente nos BSDs) ativo? Se afirmativo
> e tiver condições de compartilhar, eu gostaria de saber, porque tenho muito
> interesse nas L-800 e para aplicações como as que descreveu.
> 
> Obrigado.
> 
> Cássio
> —


Cassio, boa noite.

Se quiser algo específico me mande uma msg em pvt, mas de forma generalista o que voce pediu segue algumas saídas:

States do PF:

(root at fw1)~# pfctl -ss | wc -l
   128869

Regras de NAT no PF:

(root at fw1)~# pfctl -sn | wc -l
     602

Regras de filtro no PF:

(root at fw1)~# pfctl -sr | wc -l
   382

States no IPFW:

(root at fw1)~# ipfw -d show | wc -l
    112575

Regras no IPFW:

(root at fw1)~# ipfw list | wc -l
   293

Ambos firewall na mesma maquina. Segue saída do top:

(root at fw1)~# top -d3 -PSH
last pid:  5621;  load averages:  0.39,  0.45,  0.42                                              up 2+00:44:05  20:07:44
355 processes: 9 running, 280 sleeping, 66 waiting
CPU 0:  0.0% user,  0.0% nice,  0.4% system,  5.9% interrupt, 93.7% idle
CPU 1:  0.0% user,  0.0% nice,  0.0% system,  5.5% interrupt, 94.5% idle
CPU 2:  0.0% user,  0.0% nice,  0.0% system,  3.9% interrupt, 96.1% idle
CPU 3:  0.0% user,  0.0% nice,  0.4% system,  3.5% interrupt, 96.1% idle
CPU 4:  0.0% user,  0.0% nice,  0.4% system,  1.6% interrupt, 98.0% idle
CPU 5:  0.0% user,  0.0% nice,  0.4% system,  3.1% interrupt, 96.5% idle
CPU 6:  0.0% user,  0.0% nice,  0.8% system,  1.6% interrupt, 97.6% idle
CPU 7:  0.0% user,  0.0% nice,  0.0% system,  0.8% interrupt, 99.2% idle
Mem: 9088K Active, 63M Inact, 1486M Wired, 1132K Cache, 2341M Free
ARC: 569M Total, 96M MFU, 153M MRU, 1424K Anon, 14M Header, 306M Other
Swap: 2048M Total, 2048M Free

  PID USERNAME      PRI NICE   SIZE    RES STATE   C   TIME    WCPU COMMAND
   11 root          155 ki31     0K   128K CPU7    7  46.7H 100.00% idle{idle: cpu7}
   11 root          155 ki31     0K   128K CPU4    4  46.6H 100.00% idle{idle: cpu4}
   11 root          155 ki31     0K   128K CPU6    6  46.5H 100.00% idle{idle: cpu6}
   11 root          155 ki31     0K   128K CPU2    2  44.6H  99.76% idle{idle: cpu2}
   11 root          155 ki31     0K   128K CPU5    5  46.7H  99.66% idle{idle: cpu5}
   11 root          155 ki31     0K   128K RUN     3  44.5H  98.83% idle{idle: cpu3}
   11 root          155 ki31     0K   128K CPU1    1  44.4H  97.41% idle{idle: cpu1}
   11 root          155 ki31     0K   128K CPU0    0  44.2H  95.02% idle{idle: cpu0}
   12 root          -92    -     0K  1056K WAIT    0 124:53   3.86% intr{irq256: igb0:que}
   12 root          -92    -     0K  1056K WAIT    2 116:35   2.93% intr{irq258: igb0:que}
   12 root          -92    -     0K  1056K WAIT    2 108:46   2.69% intr{irq268: igb2:que}
   12 root          -92    -     0K  1056K WAIT    3 119:02   2.15% intr{irq259: igb0:que}
   12 root          -92    -     0K  1056K WAIT    1 128:59   1.81% intr{irq257: igb0:que}
   12 root          -92    -     0K  1056K WAIT    0 109:53   1.76% intr{irq266: igb2:que}
   12 root          -92    -     0K  1056K WAIT    3 107:57   1.71% intr{irq269: igb2:que}
   12 root          -92    -     0K  1056K WAIT    5 101:10   1.07% intr{irq271: igb2:que}
   12 root          -92    -     0K  1056K WAIT    4 106:17   0.93% intr{irq270: igb2:que}
   14 root          -16    -     0K    16K -       0  33:15   0.93% rand_harvestq
   12 root          -92    -     0K  1056K WAIT    7 105:52   0.83% intr{irq273: igb2:que}
   12 root          -92    -     0K  1056K WAIT    1 104:48   0.83% intr{irq267: igb2:que}
   12 root          -92    -     0K  1056K WAIT    3  11:23   0.34% intr{irq287: igb4:que}

--
Patrick Tracanelli

FreeBSD Brasil LTDA.
Tel.: (31) 3516-0800
316601 at sip.freebsdbrasil.com.br
http://www.freebsdbrasil.com.br
"Long live Hanin Elias, Kim Deal!"