pf slows down the network

[Predrag Punosevac]

Matthew Dillon <dillon at backplane.com> wrote:

> Make sure your pf.conf has this line.  I should make it the default
> actually.  PF has other issues, basically running under one big lock and
> not being able to take advantage of SMP concurrency, but it should be
> possible to improve performance significantly by using keep-state and also
> by reordering the rules so the ones which get hit the most are earlier in
> the list.
> 
> set keep-policy keep state (pickups, sloppy)

Hi Matt,

Thank you so much for your kind input. I added the line. It has not
changed a thing. Essentially enabling PF renders machine useless. 

I raised the question earlier about long term plans for PF on DragonFly
in the light of the fact that PF is not really portable and not really
meant to be used outside of OpenBSD (I am primarily OpenBSD user). I am
glad it is on your radar screen but I don't want you to be distracted
from the work on HAMMER2.

Predrag

> 
> -Matt
> 
> 
> 
> On Wed, Jun 25, 2014 at 10:21 PM, Predrag Punosevac <punosevac72 at gmail.com>
> wrote:
> 
> > I am running
> >
> > backup1# uname -a
> > DragonFly backup1.int.autonlab.org 3.8-RELEASE DragonFly v3.8.1-RELEASE
> > #16: Mon Jun 16 21:36:15 PDT 2014
> > justin at pkgbox64.dragonflybsd.org:
> > /usr/obj/build/home/justin/src/sys/X86_64_GENERIC
> > x86_64
> >
> >
> > After enabling PF network really slows down to the point that server is
> > unusable. ssh login hangs about a minute.  It looks very similar to this
> > thread
> >
> > http://serverfault.com/questions/514046/pf-slows-traffic-extremely-down
> >
> > and as a matter of fact I am using em driver.
> >
> > Has anybody else noticed this?
> >
> > Predrag
> >
> >