Slow connection to my BSD Server via 100Mbit Connection - IPFW/NATD/HTTPD/FTPD

Slow connection to my BSD Server via 100Mbit Connection - IPFW/NATD/HTTPD/FTPD

Post by Robert Picar » Mon, 14 Jan 2002 12:19:10



I am experiencing a problem with my BSD server, whenever I connect to it
using the web page, samba, ftp or even telnet my speed is extremly slow
(40KB/sec max, wich is the same as my internet connection)

I use a 100Mbit switch and cat 5 cable, this slow down is only experienced
when attemting to communicate with my BSD Server. Its running BSD 4.4 and
NATD to provide internet to my network, I am assuming the problem is my
fault with the NATD setup. Any help that can be provided would be greatly
appreciated, Heres the info

ifconfig outputs

dc0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        inet 90.0.0.1 netmask 0xffffff00 broadcast 90.0.0.255
        ether 00:20:78:e0:5f:74
        media: Ethernet autoselect (100baseTX <full-duplex>)
        status: active
dc1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
        inet 24.42.104.2 netmask 0xffffff80 broadcast 24.42.104.127
        ether 00:80:c6:eb:55:d7
        media: Ethernet autoselect (10baseT/UTP)
        status: active
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
        inet 127.0.0.1 netmask 0xff000000

Natd command line :

natd -f -n dc1 -dynamic

ipfw list output :

00002 deny ip from 90.0.0.0/8 to 24.42.104.2
00003 deny ip from 90.0.0.1 to 24.42.104.2
00050 divert 8668 ip from any to any via dc1
00100 allow ip from any to any via lo0
00200 deny ip from any to 127.0.0.0/8
00300 deny ip from 127.0.0.0/8 to any
65000 allow ip from any to any
65535 deny ip from any to any


 
 
 

Slow connection to my BSD Server via 100Mbit Connection - IPFW/NATD/HTTPD/FTPD

Post by Berk S. Daemo » Mon, 14 Jan 2002 19:15:29



> I am experiencing a problem with my BSD server, whenever I connect to it
> using the web page, samba, ftp or even telnet my speed is extremly slow
> (40KB/sec max, wich is the same as my internet connection)

> I use a 100Mbit switch and cat 5 cable, this slow down is only experienced
> when attemting to communicate with my BSD Server. Its running BSD 4.4 and
> NATD to provide internet to my network, I am assuming the problem is my
> fault with the NATD setup. Any help that can be provided would be greatly
> appreciated, Heres the info

> ifconfig outputs

> dc0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
>         inet 90.0.0.1 netmask 0xffffff00 broadcast 90.0.0.255
>         ether 00:20:78:e0:5f:74
>         media: Ethernet autoselect (100baseTX <full-duplex>)
>         status: active
> dc1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
>         inet 24.42.104.2 netmask 0xffffff80 broadcast 24.42.104.127
>         ether 00:80:c6:eb:55:d7
>         media: Ethernet autoselect (10baseT/UTP)
>         status: active
> lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
>         inet 127.0.0.1 netmask 0xff000000

> Natd command line :

> natd -f -n dc1 -dynamic

> ipfw list output :

> 00002 deny ip from 90.0.0.0/8 to 24.42.104.2
> 00003 deny ip from 90.0.0.1 to 24.42.104.2
> 00050 divert 8668 ip from any to any via dc1
> 00100 allow ip from any to any via lo0
> 00200 deny ip from any to 127.0.0.0/8
> 00300 deny ip from 127.0.0.0/8 to any
> 65000 allow ip from any to any
> 65535 deny ip from any to any



Use IPF (IPFilter) >=)

 
 
 

Slow connection to my BSD Server via 100Mbit Connection - IPFW/NATD/HTTPD/FTPD

Post by p.. » Mon, 14 Jan 2002 21:57:18



> I am experiencing a problem with my BSD server, whenever I connect to it
> using the web page, samba, ftp or even telnet my speed is extremly slow
> (40KB/sec max, wich is the same as my internet connection)
> I use a 100Mbit switch and cat 5 cable, this slow down is only experienced
> when attemting to communicate with my BSD Server. Its running BSD 4.4 and
> NATD to provide internet to my network, I am assuming the problem is my
> fault with the NATD setup. Any help that can be provided would be greatly
> appreciated, Heres the info

It could be half/full duplex mismatch.

Try to set all NIC in "half-duplex" ( avoid auto ) Most likley
it will make a difference.

> ifconfig outputs
> dc0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
>         inet 90.0.0.1 netmask 0xffffff00 broadcast 90.0.0.255
>         ether 00:20:78:e0:5f:74
>         media: Ethernet autoselect (100baseTX <full-duplex>)
>         status: active
> dc1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
>         inet 24.42.104.2 netmask 0xffffff80 broadcast 24.42.104.127
>         ether 00:80:c6:eb:55:d7
>         media: Ethernet autoselect (10baseT/UTP)
>         status: active
> lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
>         inet 127.0.0.1 netmask 0xff000000
> Natd command line :
> natd -f -n dc1 -dynamic
> ipfw list output :
> 00002 deny ip from 90.0.0.0/8 to 24.42.104.2
> 00003 deny ip from 90.0.0.1 to 24.42.104.2
> 00050 divert 8668 ip from any to any via dc1
> 00100 allow ip from any to any via lo0
> 00200 deny ip from any to 127.0.0.0/8
> 00300 deny ip from 127.0.0.0/8 to any
> 65000 allow ip from any to any
> 65535 deny ip from any to any


--
Peter H?kanson        
        IPSec  Sverige      (At the Riverside of Gothenburg, home of Volvo)
           Sorry about my e-mail address, but i'm trying to keep spam out.
           Remove "icke-reklam" and it works.
 
 
 

Slow connection to my BSD Server via 100Mbit Connection - IPFW/NATD/HTTPD/FTPD

Post by Robert Picar » Mon, 14 Jan 2002 22:28:40


I doubt that, Because I use a switch instead of a hub i can use full duplex,
all my computers run in full duplex mode, but thanks for the imput.



> > I am experiencing a problem with my BSD server, whenever I connect to it
> > using the web page, samba, ftp or even telnet my speed is extremly slow
> > (40KB/sec max, wich is the same as my internet connection)

> > I use a 100Mbit switch and cat 5 cable, this slow down is only
experienced
> > when attemting to communicate with my BSD Server. Its running BSD 4.4
and
> > NATD to provide internet to my network, I am assuming the problem is my
> > fault with the NATD setup. Any help that can be provided would be
greatly
> > appreciated, Heres the info

> It could be half/full duplex mismatch.

> Try to set all NIC in "half-duplex" ( avoid auto ) Most likley
> it will make a difference.

> > ifconfig outputs

> > dc0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
> >         inet 90.0.0.1 netmask 0xffffff00 broadcast 90.0.0.255
> >         ether 00:20:78:e0:5f:74
> >         media: Ethernet autoselect (100baseTX <full-duplex>)
> >         status: active
> > dc1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
> >         inet 24.42.104.2 netmask 0xffffff80 broadcast 24.42.104.127
> >         ether 00:80:c6:eb:55:d7
> >         media: Ethernet autoselect (10baseT/UTP)
> >         status: active
> > lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 16384
> >         inet 127.0.0.1 netmask 0xff000000

> > Natd command line :

> > natd -f -n dc1 -dynamic

> > ipfw list output :

> > 00002 deny ip from 90.0.0.0/8 to 24.42.104.2
> > 00003 deny ip from 90.0.0.1 to 24.42.104.2
> > 00050 divert 8668 ip from any to any via dc1
> > 00100 allow ip from any to any via lo0
> > 00200 deny ip from any to 127.0.0.0/8
> > 00300 deny ip from 127.0.0.0/8 to any
> > 65000 allow ip from any to any
> > 65535 deny ip from any to any


> --
> Peter H?kanson
>         IPSec  Sverige      (At the Riverside of Gothenburg, home of
Volvo)
>            Sorry about my e-mail address, but i'm trying to keep spam out.
>    Remove "icke-reklam" and it works.

 
 
 

Slow connection to my BSD Server via 100Mbit Connection - IPFW/NATD/HTTPD/FTPD

Post by Johann Frisc » Tue, 15 Jan 2002 00:39:10



Quote:> I doubt that, Because I use a switch instead of a hub i can use
> full duplex, all my computers run in full duplex mode, but thanks
> for the imput.

You can make sure that's not the problem. Check the output of "netstat
-ni". Ierrs/Oerrs/Coll should all be close to 0. When you see lots of
errors or collisions, then it is a hardware problem. The cable is the
most likely candidate.

Johann

Btw, please avoid the fullquote. Looks horrible...

 
 
 

Slow connection to my BSD Server via 100Mbit Connection - IPFW/NATD/HTTPD/FTPD

Post by p.. » Tue, 15 Jan 2002 04:18:22




>> I doubt that, Because I use a switch instead of a hub i can use
>> full duplex, all my computers run in full duplex mode, but thanks
>> for the imput.
> You can make sure that's not the problem. Check the output of "netstat
> -ni". Ierrs/Oerrs/Coll should all be close to 0. When you see lots of
> errors or collisions, then it is a hardware problem. The cable is the
> most likely candidate.

Collisions might occur _only_ at the switch, these won't bee seen
in netstat.

Try setting the NIC to half duplex. If that helps, problem solved.
If not, then search for other reasons.

Quote:> Johann
> Btw, please avoid the fullquote. Looks horrible...

--
Peter H?kanson        
        IPSec  Sverige      (At the Riverside of Gothenburg, home of Volvo)
           Sorry about my e-mail address, but i'm trying to keep spam out.
           Remove "icke-reklam" and it works.
 
 
 

Slow connection to my BSD Server via 100Mbit Connection - IPFW/NATD/HTTPD/FTPD

Post by Bill Vermilli » Tue, 15 Jan 2002 10:39:24





>>> I doubt that, Because I use a switch instead of a hub i can use
>>> full duplex, all my computers run in full duplex mode, but thanks
>>> for the imput.
>> You can make sure that's not the problem. Check the output of "netstat
>> -ni". Ierrs/Oerrs/Coll should all be close to 0. When you see lots of
>> errors or collisions, then it is a hardware problem. The cable is the
>> most likely candidate.
>Collisions might occur _only_ at the switch, these won't bee seen
>in netstat.
>Try setting the NIC to half duplex. If that helps, problem solved.
>If not, then search for other reasons.

And the auto-negotiation/auto-sense problems can be a bit
challenging.

http://www.cisco.com/warp/public/473/46.html

A bit long but there is chart giving all possible connection
scenarios and what can go wrong.

--

 
 
 

1. xhost / X server Connection Via IP Masqueraded connection

Hi!,

I have the following configuration:
               Modem_____A____          Ethernet             ___B___
Internet o--------o|        Linux    |o--------------------------o| Win NT |
                            ------------------                              
        ------------
                  (Dedicated)     192.168.200.1         192.168.200.2
                         (IP)

Normally I sit at the NT machine and connect to internet via Linux
running ip-masquerading. I don't know if it's possible, but I want
to be able to display x-clients (on the internet) onto my NT
machine.

I can display x-clients that are on machine A by setting the DISPLAY
environment
varialble on the NT box. I now want to send the display of an x-client
which is somewhere on the internet, to my NT machine. Note: Machine B has an
internal
IP address that's not a "true" internet address. I only have one static ip
address.

Since when the request from machine B is sent out on the
internet, it is sent as if machine A had sent it. So I don't know how I
could
have the display sent to my machine B which is not directly connected on the
internet.


seldom
visit usenet.

Sushant

2. parport_serial / serial init order wrong?

3. Really, really slow connection to local server via PPP.

4. Solaris Volume Manager in Solaris 10 miniroot

5. One NFS connection fine, one NFS connection slow

6. procmail question

7. ISP connection sharing via a PPP connection with NULL-MODEM

8. semaphore? sets? huh?

9. Fast linux-windows connection, slow linux-linux connection??

10. Internet Connection via a Network Shared Connection in RedHat 7.2

11. Slow PPP Connection But Minicom Connection Fine

12. HTTPD : SLOW all http connections

13. ipfw/natd settings for home network connected to cable internet via FreeBSD gateway?