Add first bunch of scripts
This commit is contained in:
parent
f8a7f8617d
commit
3769fb67c8
48
comparecfg.sh
Executable file
48
comparecfg.sh
Executable file
@ -0,0 +1,48 @@
|
||||
#!/bin/sh
|
||||
|
||||
showall=0
|
||||
|
||||
if [ $# -gt 0 ]; then
|
||||
if [ $1 == "-a" ]; then
|
||||
showall=1
|
||||
fi
|
||||
fi
|
||||
|
||||
chkcfg() {
|
||||
|
||||
cfg=${1}; shift;
|
||||
if [ ! -f ${cfg} ]; then
|
||||
"cannot open ${cfg}"
|
||||
return
|
||||
fi
|
||||
|
||||
echo
|
||||
echo "===> Comparing ${cfg}"
|
||||
echo
|
||||
|
||||
for i in `cat ${cfg} | grep '=' | grep '\.' | sed 's/^#//' | cut -f1 -d=`; do
|
||||
desc=`sysctl -nd ${i} 2>/dev/null`
|
||||
cmdresult=0
|
||||
curval=`sysctl -n ${i} 2>/dev/null`
|
||||
cmdresult=$?
|
||||
cfgval=`grep ${i}= ${cfg} | tail -n1 | cut -f2 -d= | sed 's/\"//g'`
|
||||
|
||||
if [ X${curval} != X${cfgval} ] || [ ${showall} -eq 1 ]; then
|
||||
|
||||
if [ ${cmdresult} -ne 0 ]; then
|
||||
curval="** sysctl returned error**"
|
||||
fi
|
||||
|
||||
|
||||
echo " Name: ${i}"
|
||||
echo " Desc: ${desc}"
|
||||
echo " Current: ${curval}"
|
||||
echo " Config: ${cfgval}"
|
||||
echo
|
||||
fi
|
||||
done
|
||||
}
|
||||
|
||||
chkcfg "/etc/sysctl.conf"
|
||||
chkcfg "/boot/loader.conf"
|
||||
|
||||
33
cpuflags
Executable file
33
cpuflags
Executable file
@ -0,0 +1,33 @@
|
||||
#!/bin/sh
|
||||
|
||||
COMPILERS="clang gcc gcc45 gcc46 gcc47 gcc48 gcc49 gcc5 gcc6"
|
||||
|
||||
check_compilers()
|
||||
{
|
||||
echo "Looking for available C compilers..."
|
||||
for C in ${COMPILERS}
|
||||
do
|
||||
P=`which ${C} 2>&1`
|
||||
RES=$?
|
||||
if [ $RES -eq 0 ]; then
|
||||
echo " - Found ${C} at ${P}"
|
||||
check_flags ${P}
|
||||
echo
|
||||
fi
|
||||
done
|
||||
}
|
||||
|
||||
check_flags()
|
||||
{
|
||||
C=$1; shift;
|
||||
printf " Compiler flags:\t"
|
||||
if `echo ${C} | grep -q clang$`
|
||||
then
|
||||
${C} -march=native -E -v - < /dev/null 2>&1 | grep cc1 | grep -o -E '\-target-cpu ([a-zA-Z0-9=\-]+)'
|
||||
else
|
||||
${C} -march=native -E -v - < /dev/null 2>&1 | grep cc1 | grep -o -E '\-march[=]*[a-zA-Z0-9]+'
|
||||
fi
|
||||
}
|
||||
|
||||
|
||||
check_compilers
|
||||
40
getlockprof
Executable file
40
getlockprof
Executable file
@ -0,0 +1,40 @@
|
||||
#!/bin/sh
|
||||
|
||||
#
|
||||
# You need to make sure kernel profiling in enabled by adding
|
||||
# following line to kernel configuartion and rebuilding the kernel
|
||||
# and modules:
|
||||
#
|
||||
# options LOCK_PROFILING
|
||||
#
|
||||
|
||||
OUTFILE=`mktemp -t kernlock`
|
||||
|
||||
if [ $# -lt 1 ]; then
|
||||
echo "Syntax: $0 [ wait_seconds ]"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
WAITTIME=${1}
|
||||
|
||||
get_prof()
|
||||
{
|
||||
sysctl -q debug.lock.prof.reset=1
|
||||
sysctl -q debug.lock.prof.enable=1
|
||||
echo "Profiling lock information for ${WAITTIME} seconds..."
|
||||
sleep ${WAITTIME}
|
||||
sysctl -q debug.lock.prof.enable=0
|
||||
sysctl debug.lock.prof.stats > ${OUTFILE}
|
||||
}
|
||||
|
||||
show_prof()
|
||||
{
|
||||
{
|
||||
head -2 ${OUTFILE}
|
||||
cat ${OUTFILE} | sort -rn -k4
|
||||
} | ${PAGER}
|
||||
}
|
||||
|
||||
get_prof
|
||||
show_prof
|
||||
echo "Raw output save to ${OUTFILE}"
|
||||
43
getpmc.sh
Executable file
43
getpmc.sh
Executable file
@ -0,0 +1,43 @@
|
||||
#!/bin/sh
|
||||
#
|
||||
check_hwpmc() {
|
||||
|
||||
# should fail if hwpmc is not availble
|
||||
|
||||
}
|
||||
|
||||
KERNDIR="/boot/kernel"
|
||||
|
||||
#
|
||||
# main
|
||||
#
|
||||
check_hwpmc
|
||||
|
||||
if [ $# -lt 1 ]; then
|
||||
echo "No event-spec given. Assuming CPU_CLK_UNHALTED_CORE..."
|
||||
EVENT="CPU_CLK_UNHALTED_CORE"
|
||||
else
|
||||
EVENT=${1}
|
||||
fi
|
||||
|
||||
if [ $# -lt 2 ]; then
|
||||
echo "No sleep time specified. Assuming 10 seconds..."
|
||||
SLEEP="10"
|
||||
else
|
||||
SLEEP=${2}
|
||||
fi
|
||||
|
||||
echo "Instrumenting for ${SLEEP} seconds..."
|
||||
pmcstat -S ${EVENT} -O ${EVENT}.pmc sleep ${SLEEP}
|
||||
echo "Extracting stack trace..."
|
||||
pmcstat -R ${EVENT}.pmc -z100 -G ${EVENT}.stacks.txt
|
||||
echo "Annotating..."
|
||||
pmcannotate -k ${KERNDIR} ${EVENT}.pmc ${KERNDIR}/kernel > ${EVENT}.annotated.txt
|
||||
echo "Extracting gprof(1) profile data..."
|
||||
pmcstat -R ${EVENT}.pmc -g
|
||||
gprof -K ${KERNDIR}/kernel ${EVENT}/kernel.gmon > ${EVENT}.gprof-kernel.txt
|
||||
|
||||
if [ -d ${EVENT} ]; then
|
||||
echo "Cleaning up..."
|
||||
rm -r ${EVENT}
|
||||
fi
|
||||
34
ixirq.sh
Executable file
34
ixirq.sh
Executable file
@ -0,0 +1,34 @@
|
||||
#!/bin/sh
|
||||
#
|
||||
# WARNING: Binding IRQs to a core will put system at risk of instability
|
||||
# even after unbinding, and will require a reboot
|
||||
#
|
||||
basedir=`dirname $0`
|
||||
binding="ix0:0:16 ix0:1:17 ix0:2:18 ix0:3:19 ix0:4:20 ix0:5:21 ix0:6:22 ix0:7:23 ix1:0:24 ix1:1:25 ix1:2:26 ix1:3:27 ix1:4:28 ix1:5:29 ix1:6:30 ix1:7:31"
|
||||
release=0
|
||||
|
||||
# if "-r" is given as parameter, threads affinity will be unbound
|
||||
|
||||
if [ $# -gt 0 ]; then
|
||||
if [ $1 = "-r" ]; then
|
||||
release=1
|
||||
fi
|
||||
fi
|
||||
|
||||
|
||||
for l in ${binding}; do
|
||||
if [ -n "$l" ]; then
|
||||
iface=`echo $l | cut -f 1 -d ":"`
|
||||
queue=`echo $l | cut -f 2 -d ":"`
|
||||
cpu=`echo $l | cut -f 3 -d ":"`
|
||||
irq=`vmstat -i | grep "${iface}:que ${queue}" | cut -f 1 -d ":" | sed "s/irq//g"`
|
||||
if [ $release -gt 0 ]; then
|
||||
echo "Binding ${iface} queue #${queue} (irq ${irq}) -> CPU${cpu}"
|
||||
cpuset -l $cpu -x $irq
|
||||
else
|
||||
echo "Unbinding ${iface} queue #${queue} (irq ${irq}) -> CPU${cpu}"
|
||||
cpuset -l all -x $irq
|
||||
fi
|
||||
fi
|
||||
done
|
||||
|
||||
37
ixque.sh
Executable file
37
ixque.sh
Executable file
@ -0,0 +1,37 @@
|
||||
#!/bin/sh
|
||||
|
||||
#
|
||||
# Bind interface queues to different cpu cores to reduce
|
||||
# context switching and cpu cache misses
|
||||
#
|
||||
|
||||
# start from this core
|
||||
cpu=0
|
||||
interfaces="ix0 ix1"
|
||||
release=0
|
||||
|
||||
# if "-r" is given as parameter, threads affinity will be unbound
|
||||
|
||||
if [ $# -gt 0 ]; then
|
||||
if [ $1 = "-r" ]; then
|
||||
release=1
|
||||
fi
|
||||
fi
|
||||
|
||||
|
||||
basedir=`dirname $0`
|
||||
for int in ${interfaces}; do
|
||||
for t in `procstat -ak | grep "${int} que" | awk '{print $2}'`; do
|
||||
if [ -n "$t" ]; then
|
||||
if [ $release -gt 0 ]; then
|
||||
echo "Unbinding ${int} kernel queue (thread #${t})"
|
||||
cpuset -l all -t $t
|
||||
else
|
||||
echo "Binding ${int} kernel queue (thread #${t}) -> CPU${cpu}"
|
||||
cpu=`expr $cpu + 1`
|
||||
cpuset -l $cpu -t $t
|
||||
fi
|
||||
fi
|
||||
done
|
||||
done
|
||||
|
||||
65
mbuf_autotune.sh
Executable file
65
mbuf_autotune.sh
Executable file
@ -0,0 +1,65 @@
|
||||
#!/bin/sh
|
||||
|
||||
#
|
||||
# Copyright (c) 2016 Babak Farrokhi. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions
|
||||
# are met:
|
||||
#
|
||||
# 1. Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# 2. Redistributions in binary form must reproduce the above copyright
|
||||
# notice, this list of conditions and the following disclaimer in the
|
||||
# documentation and/or other materials provided with the distribution.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS "AS IS" AND
|
||||
# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
||||
# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
|
||||
# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
||||
# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
||||
# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
||||
# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
||||
# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
||||
# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
||||
# SUCH DAMAGE.
|
||||
#
|
||||
|
||||
#
|
||||
# Suggest optimum value for kern.ipc.*
|
||||
# based on /sys/kern/kern_mbuf.c
|
||||
#
|
||||
|
||||
MCLBYTES=2048
|
||||
MSIZE=256
|
||||
PHYSMEM=`sysctl -n hw.physmem`
|
||||
PAGE_SIZE=`sysctl -n hw.pagesize`
|
||||
VM_KMEM_SIZE=`sysctl -n vm.kmem_size`
|
||||
REALMEM=${VM_KMEM_SIZE}
|
||||
MAXMBUFMEM=`expr $REALMEM / 4 \* 3`
|
||||
MJUMPAGESIZE=$PAGE_SIZE
|
||||
MJUM9BYTES=`expr 9 \* 1024`
|
||||
MJUM16BYTES=`expr 16 \* 1024`
|
||||
|
||||
NMBCLUSTERS=`expr $MAXMBUFMEM / $MCLBYTES / 4`
|
||||
NMBJUMBOP=`expr $MAXMBUFMEM / $MJUMPAGESIZE / 4`
|
||||
NMBJUMBO9=`expr $MAXMBUFMEM / $MJUM9BYTES / 6`
|
||||
NMBJUMBO16=`expr $MAXMBUFMEM / $MJUM16BYTES / 6`
|
||||
|
||||
echo "Suggested settings:"
|
||||
echo "kern.ipc.maxmbufmem=$MAXMBUFMEM"
|
||||
echo "kern.ipc.nmbclusters=$NMBCLUSTERS"
|
||||
echo "kern.ipc.nmbjumbop=$NMBJUMBOP"
|
||||
echo "kern.ipc.nmbjumbo9=$NMBJUMBO9"
|
||||
echo "kern.ipc.nmbjumbo16=$NMBJUMBO16"
|
||||
|
||||
NMBUFS=`sysctl -n kern.ipc.nmbufs`
|
||||
NMMAX1=`expr $NMBCLUSTERS + $NMBJUMBOP + $NMBJUMBO9 + $NMBJUMBO16`
|
||||
NMMAX2=`expr $MAXMBUFMEM / $MSIZE / 5`
|
||||
if [ $NMMAX1 -gt $NMMAX2 ]; then
|
||||
NMBUFS=$NMMAX1
|
||||
else
|
||||
NMBUFX=$NMMAX2
|
||||
fi
|
||||
echo "kern.ipc.nmbufs=$NMBUFS"
|
||||
22
munin-plugin-deploy.sh
Executable file
22
munin-plugin-deploy.sh
Executable file
@ -0,0 +1,22 @@
|
||||
#!/bin/sh
|
||||
|
||||
MUNIN_LIBDIR="/usr/local/share/munin"
|
||||
PLUGIN_PATH=${MUNIN_LIBDIR}/plugins
|
||||
INSTALL_PATH=/usr/local/etc/munin/plugins
|
||||
export MUNIN_LIBDIR
|
||||
|
||||
# cleanup installed plugins
|
||||
find ${INSTALL_PATH} -type l -delete
|
||||
|
||||
# install plugins
|
||||
for p in `find ${PLUGIN_PATH} -type f -perm +u+x`; do
|
||||
pname=`basename $p`
|
||||
if echo ${pname} | grep -q _$; then # plugin name ends with underline
|
||||
params=`${p} suggest` || ( echo "failed to collect suggestion from ${pname} plugin"; exit 1)
|
||||
for x in ${params}; do
|
||||
ln -vs ${p} ${INSTALL_PATH}/${pname}${x}
|
||||
done
|
||||
else # not a wildcard plugin
|
||||
ln -vs ${p} ${INSTALL_PATH}/${pname}
|
||||
fi
|
||||
done
|
||||
114
nullroute
Executable file
114
nullroute
Executable file
@ -0,0 +1,114 @@
|
||||
#!/bin/sh
|
||||
#
|
||||
# Copyright (c) 2015 Babak Farrokhi. All rights reserved.
|
||||
#
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions
|
||||
# are met:
|
||||
#
|
||||
# 1. Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# 2. Redistributions in binary form must reproduce the above copyright
|
||||
# notice, this list of conditions and the following disclaimer in the
|
||||
# documentation and/or other materials provided with the distribution.
|
||||
#
|
||||
# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS "AS IS" AND
|
||||
# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
||||
# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
|
||||
# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
||||
# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
||||
# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
||||
# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
||||
# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
||||
# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
||||
# SUCH DAMAGE.
|
||||
#
|
||||
# this script nullroutes a give CIDR
|
||||
#
|
||||
#
|
||||
|
||||
ROUTE="/sbin/route"
|
||||
NETSTAT="/usr/bin/netstat"
|
||||
GREP="/usr/bin/grep"
|
||||
AWK="/usr/bin/awk"
|
||||
CFG="/usr/local/etc/nullroute.conf"
|
||||
|
||||
nullroute() {
|
||||
local ADDR=${1}; shift;
|
||||
|
||||
${ROUTE} add -net ${ADDR} 127.0.0.1 -blackhole
|
||||
}
|
||||
|
||||
delroute() {
|
||||
local ADDR=${1}; shift;
|
||||
|
||||
${ROUTE} delete ${ADDR}
|
||||
}
|
||||
|
||||
showroute() {
|
||||
${NETSTAT} -rn | ${GREP} "SB " | ${AWK} '{print $1}'
|
||||
}
|
||||
|
||||
loadroutes() {
|
||||
if [ ! -f ${CFG} ]; then
|
||||
echo "Cannot open ${CFG}"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
for R in `cat ${CFG} | ${GREP} -E -v '^[[:space:]]*$'`; do
|
||||
nullroute ${R}
|
||||
done
|
||||
}
|
||||
|
||||
saveroutes() {
|
||||
showroute > ${CFG} && echo "configuration saved to ${CFG}"
|
||||
}
|
||||
|
||||
flush() {
|
||||
for R in `${NETSTAT} -rn | ${GREP} "SB " | ${AWK} '{print $1}'`; do
|
||||
delroute ${R}
|
||||
done
|
||||
}
|
||||
|
||||
help() {
|
||||
echo "$0 [ add <host> | del <host> | show | load | save | flush ]"
|
||||
}
|
||||
|
||||
if [ $# -lt 1 ]; then
|
||||
help
|
||||
exit 1
|
||||
fi
|
||||
|
||||
case ${1} in
|
||||
add)
|
||||
if [ x${2} == x ]; then
|
||||
help
|
||||
exit 1
|
||||
fi
|
||||
nullroute ${2}
|
||||
;;
|
||||
del)
|
||||
if [ x${2} == x ]; then
|
||||
help
|
||||
exit 1
|
||||
fi
|
||||
delroute ${2}
|
||||
;;
|
||||
show)
|
||||
showroute
|
||||
;;
|
||||
load)
|
||||
loadroutes
|
||||
;;
|
||||
save)
|
||||
saveroutes
|
||||
;;
|
||||
flush)
|
||||
flush
|
||||
;;
|
||||
*)
|
||||
help
|
||||
;;
|
||||
esac
|
||||
|
||||
37
splitgateway
Executable file
37
splitgateway
Executable file
@ -0,0 +1,37 @@
|
||||
#!/bin/sh
|
||||
#
|
||||
# Split default route into 8 smaller routes to avoid
|
||||
# lock contention during route lookup
|
||||
#
|
||||
# If a default router is not specified, it will be
|
||||
# taken from rc.conf.
|
||||
#
|
||||
|
||||
ROUTECMD="/sbin/route -q "
|
||||
ROUTES="0.0.0.0/3 32.0.0.0/3 64.0.0.0/3 96.0.0.0/3 128.0.0.0/3 160.0.0.0/3 192.0.0.0/3 224.0.0.0/3"
|
||||
|
||||
if [ $# -lt 1 ]; then
|
||||
echo "syntax: $0 [start|stop]"
|
||||
exit 1
|
||||
fi
|
||||
|
||||
case $1 in
|
||||
start)
|
||||
GW=`sysrc -n defaultrouter`
|
||||
echo "splitgateway: Assuming ${GW} from rc.conf..."
|
||||
|
||||
for R in ${ROUTES}; do
|
||||
${ROUTECMD} add -net ${R} ${GW}
|
||||
done
|
||||
;;
|
||||
stop)
|
||||
for R in ${ROUTES}; do
|
||||
${ROUTECMD} delete -net ${R}
|
||||
done
|
||||
;;
|
||||
esac
|
||||
|
||||
|
||||
# no need to remove default route since it will never be matched
|
||||
#${ROUTECMD} delete default
|
||||
|
||||
270
tuning
Executable file
270
tuning
Executable file
@ -0,0 +1,270 @@
|
||||
#!/bin/sh
|
||||
|
||||
# Strict script
|
||||
set -e
|
||||
set -u
|
||||
|
||||
# Global variables
|
||||
HOST=false
|
||||
ROUTER=false
|
||||
|
||||
# Get options passed by user
|
||||
getoption () {
|
||||
if [ $# -ge 1 ]; then
|
||||
FIRST_OPTION="$1"
|
||||
else
|
||||
usage
|
||||
exit 1
|
||||
fi
|
||||
case "$FIRST_OPTION" in
|
||||
host)
|
||||
HOST=true
|
||||
;;
|
||||
router)
|
||||
ROUTER=true
|
||||
;;
|
||||
help)
|
||||
usage
|
||||
exit 0
|
||||
;;
|
||||
esac
|
||||
}
|
||||
|
||||
usage () {
|
||||
# Display usage
|
||||
echo "Usage: $0 option"
|
||||
echo " option can be:"
|
||||
echo " -host: tuning tips for end-host"
|
||||
echo " -router: tuning tips for router"
|
||||
echo " -help: display this help"
|
||||
}
|
||||
|
||||
sysctl_atleast () {
|
||||
# Check the sysctl parameter is at least configured to the value
|
||||
# $1: sysctl parameter
|
||||
# $2: recommended value
|
||||
if [ `sysctl -n $1` -lt $2 ]; then
|
||||
echo "$1=\"$2\""
|
||||
fi
|
||||
}
|
||||
|
||||
sysctl_equal () {
|
||||
# Check the sysctl parameter match (equal) the value
|
||||
# $1: sysctl parameter
|
||||
# $2: recommended value
|
||||
if [ `sysctl -n $1` -ne $2 ]; then
|
||||
echo "$1=\"$2\""
|
||||
fi
|
||||
}
|
||||
|
||||
if_have_cap () {
|
||||
# Check if the interface have capabilities and if it's enabled return true (0)
|
||||
# $1: if
|
||||
# $2: capability
|
||||
ifconfig -m $1 | egrep -q "capabilities.*$2" && return 0 || return 1
|
||||
}
|
||||
|
||||
if_is_cap_enabled () {
|
||||
# Check if the interface capability is enabled: return true
|
||||
# $1: if
|
||||
# $2: capability
|
||||
ifconfig -m $1 | egrep -q "options.*$2" && return 0 || return 1
|
||||
}
|
||||
|
||||
tune () {
|
||||
# Major function that call the others
|
||||
# RO values need to be put in /boot/loader.conf.local
|
||||
# RW values need to be put in /etc/sysctl.conf
|
||||
echo "#==> Start of /boot/loader.conf.local"
|
||||
echo "#TO DO All these values doesn't works here and need to be put in /etc/sysctl.conf"
|
||||
net_nic
|
||||
($ROUTER) && net_forward
|
||||
($ROUTER) && net_inet
|
||||
($ROUTER) && cpu_ht
|
||||
net_netisr
|
||||
# Autombuf tunning avoid the need fo checking them
|
||||
# net_mbuf
|
||||
echo "#<== End of /boot/loader.conf.local"
|
||||
net_netstat
|
||||
echo "#==> To be added to /etc/rc.conf"
|
||||
#Need to replace this part by a list of modules (ichsmb coretemp aesni watchdog?)
|
||||
if grep -q 'Feature.*AESNI' /var/run/dmesg.boot ; then
|
||||
#CPU support, check if not allready loaded
|
||||
if ! kldstat -n aesni 2>&1 | grep -q aesni; then
|
||||
echo "#CPU has AESNI feature, you should load the modules"
|
||||
echo 'kld_list="cryptodev aesni"'
|
||||
fi
|
||||
fi
|
||||
for NIC in `ifconfig -l "ether"`; do
|
||||
#skip loopback interfaces
|
||||
echo $NIC | egrep -q "lo[[:digit:]]" && continue
|
||||
# Check only interface with vlan configured on them
|
||||
if egrep -q "ifconfig_vlan.*${NIC}" /etc/rc.conf; then
|
||||
if if_have_cap ${NIC} VLAN_HWFILTER; then
|
||||
if ! if_is_cap_enabled ${NIC} VLAN_HWFILTER; then
|
||||
echo "${NIC} configured with vlan and support VLAN_HWFILTER"
|
||||
echo " => add the vlanhwfilter option to ifconfig_${NIC} in /etc/rc.conf"
|
||||
fi
|
||||
fi # if_have_cap
|
||||
fi # rc.conf
|
||||
# Router should not have LRO/TSO4/TSO6 enabled
|
||||
if ($ROUTER); then
|
||||
for CAP in LRO TSO4 TSO6; do
|
||||
if_is_cap_enabled ${NIC} ${CAP} && \
|
||||
echo "A router MUST NOT have ${CAP} enabled on forwarding NIC"
|
||||
done
|
||||
fi
|
||||
# Check for virtualized
|
||||
if (${VM_DETECTED}); then
|
||||
if if_have_cap ${NIC} POLLING; then
|
||||
if ! if_is_cap_enabled ${NIC} POLLING; then
|
||||
# http://lists.freebsd.org/pipermail/freebsd-net/2013-May/035626.html
|
||||
echo "In VM, ${NIC} can have better behavior if POLLING was enabled"
|
||||
echo " => Enable polling in /etc/rc.conf.misc"
|
||||
fi
|
||||
fi
|
||||
# need disable hardware assisted features (need to found reference about this tip)
|
||||
for CAP in RXCSUM TXCSUM TSO4 TSO6; do
|
||||
if_is_cap_enabled ${NIC} ${CAP} && \
|
||||
echo "${NIC} have ${CAP} enabled: Disable it in a VM"
|
||||
done # end for CAP
|
||||
fi
|
||||
done
|
||||
|
||||
}
|
||||
|
||||
cpu_ht () {
|
||||
# Check if HyperThreading is enabled
|
||||
grep -q "^FreeBSD/SMP.*SMT" /var/run/dmesg.boot && echo "You should disable HyperThreading"
|
||||
}
|
||||
|
||||
net_nic () {
|
||||
# NIC drivers tuning
|
||||
# em tuning
|
||||
if ifconfig -l "ether" | egrep -q 'em[[:digit:]]'; then
|
||||
# Need to check if there are not 82542 or 82543 (support 256 max)
|
||||
for VALUE in hw.em.txd hw.em.rxd; do
|
||||
sysctl_equal ${VALUE} 2048
|
||||
done
|
||||
# Disabling limit of rx frame
|
||||
#sysctl_atleast hw.em.rx_process_limit 500
|
||||
sysctl_equal hw.em.rx_process_limit -1
|
||||
# Increasing interrupt delay is bad for a router because it add latency
|
||||
# http://www.intel.com/design/network/applnots/ap450.htm
|
||||
if ! ($ROUTER); then
|
||||
for VALUE in hw.em.rx_abs_int_delay hw.em.tx_abs_int_delay; do
|
||||
sysctl_equal ${VALUE} 1024
|
||||
done
|
||||
for VALUE in hw.em.rx_int_delay hw.em.tx_int_delay; do
|
||||
sysctl_equal ${VALUE} 512
|
||||
done
|
||||
fi
|
||||
fi
|
||||
# igb tuning
|
||||
if ifconfig -l "ether" | egrep -q 'igb[[:digit:]]'; then
|
||||
for VALUE in hw.igb.txd hw.igb.rxd; do
|
||||
sysctl_equal ${VALUE} 2048
|
||||
done
|
||||
# http://wiki.freebsd.org/NetworkPerformanceTuning
|
||||
sysctl_atleast hw.igb.max_interrupt_rate 32000
|
||||
# Need mbuf be increased if rx_process limit increased?
|
||||
#sysctl_atleast hw.igb.rx_process_limit 500
|
||||
# Disabling limit of rx frame
|
||||
sysctl_equal hw.igb.rx_process_limit -1
|
||||
# Default kern.ipc.nmbclusters is too small for multiple igb card and multicore
|
||||
# Need to add a test [ `sysctl -n hw.ncpu` -gt 1 ] and arch (i386 don't like too much)
|
||||
[ `sysctl -n hw.ncpu` -ge 4 ] && sysctl_atleast kern.ipc.nmbclusters 262144
|
||||
fi
|
||||
# ixgbe tuning
|
||||
if ifconfig -l "ether" | egrep -q 'ix[[:digit:]]'; then
|
||||
# source: README in drivers source
|
||||
# When using the ixgbe driver with RSS autoconfigured based on the number of
|
||||
# cores (the default setting) and that number is larger than 4, increase the
|
||||
# memory resources allocated for the mbuf pool as follows:
|
||||
# Warning: Where to put this valuedepends if drivers is a module or in kernel
|
||||
if [ `sysctl -n hw.ncpu` -ge 4 ]; then
|
||||
#loader.conf ?
|
||||
sysctl_atleast kern.ipc.nmbclusters 262144
|
||||
#sysctl.conf ?
|
||||
sysctl_atleast kern.ipc.nmbjumbop 262144
|
||||
fi
|
||||
fi
|
||||
# General
|
||||
# default value of send interface queue length
|
||||
# If em or igb were tunned, need to change this too
|
||||
# http://lists.freebsd.org/pipermail/freebsd-net/2012-July/032712.html
|
||||
sysctl_atleast net.link.ifqmaxlen 10240
|
||||
|
||||
# cxgbe (Chelsio) tuning
|
||||
if ifconfig -l "ether" | egrep -q 'cxl[[:digit:]]'; then
|
||||
# source: http://bsdrp.net/documentation/examples/forwarding_performance_lab_of_a_hp_proliant_dl360p_gen8_with_10-gigabit_with_10-gigabit_chelsio_t540-cr
|
||||
# If ncpu=8 and drivers is using 8 queue (default), should reduce the NIC queue to 4
|
||||
if [ `sysctl -n hw.ncpu` -eq 8 ]; then
|
||||
[ `sysctl -n dev.cxl.0.nrxq` -eq 8 ] && echo 'echo hw.cxgbe.nrxq10g="4" >> /boot/loader.conf.local'
|
||||
[ `sysctl -n dev.cxl.0.ntxq` -eq 8 ] && echo 'echo hw.cxgbe.ntxq10g="4" >> /boot/loader.conf.local'
|
||||
fi
|
||||
fi
|
||||
}
|
||||
|
||||
net_netstat () {
|
||||
# Analysing netstat -m output and provide advice regarding the result
|
||||
echo "TODO: netstat"
|
||||
}
|
||||
|
||||
net_forward () {
|
||||
# http://wiki.freebsd.org/NetworkPerformanceTuning
|
||||
sysctl_equal net.inet.ip.forwarding 1
|
||||
if [ `sysrc -n ipsec_enable` == "YES" ]; then
|
||||
sysctl_equal net.inet.ip.fastforwarding 0
|
||||
echo "IPSec configuration detected"
|
||||
echo "Check if your hardware support one of these crypto accelerator modules:"
|
||||
echo " aesni(4), glxsb(4), hifn(4), ipsec(4), padlock(4), safe(4) or ubsec(4)"
|
||||
fi
|
||||
}
|
||||
|
||||
net_inet () {
|
||||
# http://wiki.freebsd.org/NetworkPerformanceTuning
|
||||
for VALUE in net.inet.raw.maxdgram net.inet.raw.recvspace; do
|
||||
sysctl_atleast ${VALUE} 16384
|
||||
done
|
||||
for VALUE in net.inet.ip.redirect; do
|
||||
sysctl_equal ${VALUE} 0
|
||||
done
|
||||
}
|
||||
|
||||
net_netisr () {
|
||||
# http://wiki.freebsd.org/NetworkPerformanceTuning
|
||||
sysctl_atleast net.route.netisr_maxqlen 2048
|
||||
}
|
||||
|
||||
net_mbuf () {
|
||||
# kern.ipc.nmbclusters must be increased if multiple igb (man igb)
|
||||
# Need to calculate (regarding RAM size) this value
|
||||
# Does vm.kmem_size should be upgraded too ?
|
||||
# igb loads 8 rings, each of 1024 per NIC
|
||||
sysctl_atleast kern.ipc.nmbclusters 262144
|
||||
echo "On the following output, with all your NIC already configured"
|
||||
echo " check the current and total"
|
||||
netstat -m | grep "mbuf clusters in use"
|
||||
}
|
||||
|
||||
|
||||
|
||||
timecounter () {
|
||||
# Are the timecounter tuning usefull ?
|
||||
TIMECOUTER_CHOICE=`sysctl -n sysctl kern.timecounter.choice`
|
||||
if echo "${TIMECOUTER_CHOICE}" | grep -q "HPET" ; then
|
||||
sysctl -n kern.timecounter.hardware | grep -q HPET || \
|
||||
echo "sysctl kern.timecounter.hardware=HPET"
|
||||
fi
|
||||
}
|
||||
###################
|
||||
## Main function ##
|
||||
###################
|
||||
|
||||
getoption $*
|
||||
#system_inventory
|
||||
# Look for VM environnement
|
||||
sysctl -n kern.vm_guest | grep -q -v "none" && VM_DETECTED=true || VM_DETECTED=false
|
||||
tune
|
||||
echo "Done!"
|
||||
Loading…
x
Reference in New Issue
Block a user