Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    MBUF usage at 87%

    Scheduled Pinned Locked Moved Hardware
    35 Posts 13 Posters 11.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      almabes
      last edited by

      From what I have learned working with supermule on DDosing pfSense, there are major architectural differences between the two Intel gigE drivers, em and igb.

      The long and the short of it is Intel cards that use the igb driver set up more queues, which require more mbufs than the older em driver.ย  I have also read somewhere, that there is talk of Intel rewriting the em driver to make it more scalable, and more like the igb driver.

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        For 2.2.3 we bumped up the default mbuf allocation on the 4860 and its relatives.

        You can adjust the nmbclusters value as described at https://doc.pfsense.org/index.php/Tuning_and_Troubleshooting_Network_Cards โ€“ though one change: We have found that it's also able to be adjusted "live" by adding it as a system tunable. Used to be it only worked as a loader.conf(.local) value but not any more.

        Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • P
          pfcode
          last edited by

          @jimp:

          though one change: We have found that it's also able to be adjusted "live" by adding it as a system tunable. Used to be it only worked as a loader.conf(.local) value but not any more.

          Hi,

          I couldn't find it (kern.ipc.nmbclusters) in System->Advantage->System tunable list, using 2.2.3

          Release: pfSense 2.4.3(amd64)
          M/B: Supermicro A1SRi-2558F
          HDD: Intel X25-M 160G
          RAM: 2x8Gb Kingston ECC ValueRAM
          AP: Netgear R7000 (XWRT), Unifi AC Pro

          1 Reply Last reply Reply Quote 0
          • jimpJ
            jimp Rebel Alliance Developer Netgate
            last edited by

            It's not there by default, that list isn't limited though. Click + to add it in and set whatever value you want.

            Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

            Need help fast? Netgate Global Support!

            Do not Chat/PM for help!

            1 Reply Last reply Reply Quote 0
            • P
              pfcode
              last edited by

              @jimp:

              It's not there by default, that list isn't limited though. Click + to add it in and set whatever value you want.

              Oh, I c, Thanks.

              Release: pfSense 2.4.3(amd64)
              M/B: Supermicro A1SRi-2558F
              HDD: Intel X25-M 160G
              RAM: 2x8Gb Kingston ECC ValueRAM
              AP: Netgear R7000 (XWRT), Unifi AC Pro

              1 Reply Last reply Reply Quote 0
              • G
                got0
                last edited by

                For SG-4860, you bumped nmbclusters to 26584 in 2.2.3? That's still too close to the max values I witnessed while playing on my box:

                max current = 26.60K
                max total= 28.09K

                I go with 32K to have a stable box.

                1 Reply Last reply Reply Quote 0
                • jimpJ
                  jimp Rebel Alliance Developer Netgate
                  last edited by

                  It's not corrected on upgrade, new install only. The 4860 units should probably have 2-4x that value, give or take, minimum.

                  Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                  Need help fast? Netgate Global Support!

                  Do not Chat/PM for help!

                  1 Reply Last reply Reply Quote 0
                  • dennypageD
                    dennypage
                    last edited by

                    So, what is the value that is being chosen on new installs for the SG-4860?

                    [I've just upgraded my SG-2400 to a SG-4860, but I'm am using the same drive & essentially same config that was in the SG-2440]

                    Thanks.

                    @jimp:

                    It's not corrected on upgrade, new install only. The 4860 units should probably have 2-4x that value, give or take, minimum.

                    1 Reply Last reply Reply Quote 0
                    • G
                      got0
                      last edited by

                      @jimp:

                      It's not corrected on upgrade, new install only.

                      What is the recommended upgrade method to get such tuning parameters after an install? Re-installing an SG-* box for each new version of pfsense is not the way, is it?

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        Create the file /boot/loader.conf.local
                        Add to it the line:

                        kern.ipc.nmbclusters="131072"
                        

                        Or whatever value you want. As described here: https://doc.pfsense.org/index.php/Tuning_and_Troubleshooting_Network_Cards#mbuf_.2F_nmbclusters
                        Reboot to see the new value loaded.

                        Steve

                        1 Reply Last reply Reply Quote 0
                        • R
                          robi
                          last edited by

                          I remember reading somewhere that it's not needed to mess around with /boot/loader.conf.local anymore.
                          Creating a new system tunable also works. If it does, that would be better, because it's also stored in the config file, which means it's preserved for the future.

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            Good point. Jim wrote that in this thread: https://forum.pfsense.org/index.php?topic=92253.msg532431#msg532431
                            I guess I'm too used to using loader.conf.local.ย  ::)

                            Steve

                            1 Reply Last reply Reply Quote 0
                            • R
                              robatwork
                              last edited by

                              This seems to be the latest post on MBUF - just to note that in 2.3.2 you can add the kern.ipc.nmbclusters variable in system tunables and it takes effect immediately without needing a reboot. Worked well for me

                              1 Reply Last reply Reply Quote 0
                              • jimpJ
                                jimp Rebel Alliance Developer Netgate
                                last edited by

                                There is still an advantage to putting the value in loader.conf.local, however. If the hardware requires more mbufs to properly initialize at boot time, it may not be able to do so if you have only set the value as a tunable. If the problem is that the usage increases with load after boot time, then it is OK to use a tunable.

                                Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                                Need help fast? Netgate Global Support!

                                Do not Chat/PM for help!

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.