Re: [Shorewall-users] UPDATE: Simple TC on Recent Kernels (especially X86-64/AMD64)

[Tom E. <te...@sh...>]

On 3/13/11 10:29 AM, Tom Eastep wrote:
> If you find that outgoing traffic crawls along no matter how high you
> set the bandwidth, then you can apply this workaround. Install the
> 'ethtool' package, then in /etc/shorewall/init, add this command:
> 
> 	ethtool -K ethX tso off gso off
> 
> where ethX is the affected interface.
> 
> This workaround turns off TCP segmentation offloading and Generic
> segmentation offloading in the NIC.
> 
> I'll be working on a better approach that will allow this offloading to
> be re-enabled.

The better approach is to adjust the specified <minburst>. I suggest
starting with 10kb which works well for me. Here's what I have in my
tcinterfaces file:

#IFACE TYPE	IN-BANDWIDTH OUT-BANDWIDTH
eth0   External	50mbit:200kb 5.0mbit:100kb:200ms:100mbit:10kb
                                                        -----
With this setting, I was able to re-enable TSO/GSO using:

ethtool -K eth0 tso on gso on

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________