Re: [gentoo-hardened] 2.6.20-r2 is slow!?

[Caleb Cushing]

http://slave-network.org/firewall.txt

On 5/3/07, 7v5w7go9ub0o <7v5w7go9ub0o@×××××.com> wrote:
>
> Thanks again for the quick reply! It'll be interesting to compare
> configs. I have begun the "boolean reduction compilation" process:
> deactivating half of the grsec/pax stuff; testing; reactivating that
> half and deactivating the remaining half; etc. :-(
>
> Also looking at 2.6.21 ......
>
> Could you also attach your iptables rules? I presume you're doing a
> pretty straight forward FW (e.g. allow outgoing; drop or block
> incoming; check for tcp flags; log martians; etc.)
>
>
> On 5/2/07, Caleb Cushing <xenoterracide@×××××.com > wrote:
> >
> > I've attached the config, and I haven't noticed any issues with slowness
> > I'm running 2.6.20 on 3 boxes, but not hardened. so it could be a
> > hardened patch. I just know iptables had major changes.
> >
> > On 5/2/07, 7v5w7go9ub0o <7v5w7go9ub0o@×××××.com> wrote:
> > >
> > > Thank You!!  for the quick response.
> > >
> > > Yes.... please do let me see your config file.  I've been thinking of
> > > doing this for a while, and now is a good time.
> > >
> > > Are you running 2.6.20x?  If yes, is it as responsive as '18x ?
> > >
> > > TIA
> > >
> > > On 5/1/07, Caleb Cushing < xenoterracide@×××××.com> wrote:
> > > >
> > > > don't know about being slow but iptables had major changes in
> > > > 2.6.20.x so you probably will have to go through those manually. I
> > > > can give you my config for iptables if you need help getting it working.
> > > >
> > > > On 5/1/07, 7v5w7go9ub0o <7v5w7go9ub0o@×××××.com> wrote:
> > > > >
> > > > > Just installed 2.6.20-r2, and find it particularly slow - slow to
> > > > > boot, slow to operate (high cpu), while 2.6.18-r6 is quick, with
> > > > > low cpu useage.
> > > > >
> > > > > Any ideas, please? (e.g. there was a configuration option a few
> > > > > releases ago that snuck in and slowed things down; I've forgotten which it
> > > > > was :-( )
> > > > >
> > > > > (Same kernel  configurations; had to update udev from 104-r12 to
> > > > > 109-r1 to keep from crashing during the boot process; replaced firehol with
> > > > > shorewall 3.4.2, which works on 2.6.18-r6 just fine, but fails on
> > > > > 2.6.20-r2 . Did not upgrade gradm, as it's likely I'll stay with
> > > > > '18)
> > > > >
> > > > > TIA
> > > > >
> > > >
> > > >
> > > >
> > > > --
> > > > Caleb Cushing
> > >
> > >
> > >
> >
> >
> > --
> > Caleb Cushing
> >
>
>


-- 
Caleb Cushing