|
List Info
Thread: 2.6.20-r2 is slow!?
|
|
| 2.6.20-r2 is slow!? |

|
2007-05-01 10:02:44 |
|
Just installed 2.6.20-r2, and find it particularly slow - slow to boot, slow to operate (high cpu), while 2.6.18-r6 is quick, with low cpu useage.
Any ideas, please? (e.g. there was a configuration option a few releases ago that snuck in and slowed things down; I've forgotten which it was :-( )
(Same kernel configurations; had to update udev from 104-r12 to 109-r1 to keep from crashing during the boot process; replaced firehol with shorewall 3.4.2, which works on 2.6.18-r6 just fine, but fails on 2.6.20-r2
. Did not upgrade gradm, as it's likely I'll stay with '18)
TIA
|
| Re: 2.6.20-r2 is slow!? |

|
2007-05-01 10:07:45 |
|
don't know about being slow but iptables had major changes in 2.6.20.x so you probably will have to go through those manually. I can give you my config for iptables if you need help getting it working.
On 5/1/07, 7v5w7go9ub0o < 7v5w7go9ub0o gmail.com">7v5w7go9ub0o gmail.com> wrote:
Just installed 2.6.20-r2, and find it particularly slow - slow to boot, slow to operate (high cpu), while 2.6.18-r6 is quick, with low cpu useage.
Any ideas, please? (e.g. there was a configuration option a few releases ago that snuck in and slowed things down; I've forgotten which it was :-( )
(Same kernel configurations; had to update udev from 104-r12 to 109-r1 to keep from crashing during the boot process; replaced firehol with shorewall 3.4.2, which works on 2.6.18-r6 just fine, but fails on 2.6.20-r2
. Did not upgrade gradm, as it's likely I'll stay with '18)
TIA
-- Caleb Cushing
|
| Re: 2.6.20-r2 is slow!? |

|
2007-05-02 12:19:00 |
|
Thank You!! for the quick response.
Yes.... please do let me see your config file. I've been thinking of doing this for a while, and now is a good time.
Are you running 2.6.20x? If yes, is it as responsive as '18x ?
TIA
On 5/1/07, Caleb Cushing < xenoterracide gmail.com">xenoterracide gmail.com> wrote:
don't know about being slow but iptables had major changes in 2.6.20.x so you probably will have to go through those manually. I can give you my config for iptables if you need help getting it working.
On 5/1/07, 7v5w7go9ub0o < 7v5w7go9ub0o gmail.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">7v5w7go9ub0o gmail.com> wrote:
Just installed 2.6.20-r2, and find it particularly slow - slow to boot, slow to operate (high cpu), while 2.6.18-r6 is quick, with low cpu useage.
Any ideas, please? (e.g. there was a configuration option a few releases ago that snuck in and slowed things down; I've forgotten which it was :-( )
(Same kernel configurations; had to update udev from 104-r12 to 109-r1 to keep from crashing during the boot process; replaced firehol with shorewall 3.4.2, which works on 2.6.18-r6 just fine, but fails on 2.6.20-r2
. Did not upgrade gradm, as it's likely I'll stay with '18)
TIA
-- Caleb Cushing
|
| Re: 2.6.20-r2 is slow!? |

|
2007-05-02 14:32:10 |
|
I've attached the config, and I haven't noticed any issues with slowness I'm running 2.6.20 on 3 boxes, but not hardened. so it could be a hardened patch. I just know iptables had major changes.
On 5/2/07, 7v5w7go9ub0o < 7v5w7go9ub0o gmail.com">7v5w7go9ub0o gmail.com> wrote:
Thank You!! for the quick response.
Yes.... please do let me see your config file. I've been thinking of doing this for a while, and now is a good time.
Are you running 2.6.20x? If yes, is it as responsive as '18x ?
TIA
On 5/1/07, Caleb Cushing < xenoterracide gmail.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
xenoterracide gmail.com> wrote:
don't know about being slow but iptables had major changes in 2.6.20.x so you probably will have to go through those manually. I can give you my config for iptables if you need help getting it working.
On 5/1/07, 7v5w7go9ub0o < 7v5w7go9ub0o gmail.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">7v5w7go9ub0o gmail.com> wrote:
Just installed 2.6.20-r2, and find it particularly slow - slow to boot, slow to operate (high cpu), while 2.6.18-r6 is quick, with low cpu useage.
Any ideas, please? (e.g. there was a configuration option a few releases ago that snuck in and slowed things down; I've forgotten which it was :-( )
(Same kernel configurations; had to update udev from 104-r12 to 109-r1 to keep from crashing during the boot process; replaced firehol with shorewall 3.4.2, which works on 2.6.18-r6 just fine, but fails on 2.6.20-r2
. Did not upgrade gradm, as it's likely I'll stay with '18)
TIA
-- Caleb Cushing
-- Caleb Cushing
|
|
| Re: 2.6.20-r2 is slow!? |

|
2007-05-03 14:54:44 |
|
Thanks again for the quick reply! It'll be interesting to compare configs. I have begun the "boolean reduction compilation" process: deactivating half of the grsec/pax stuff; testing; reactivating that
half and deactivating the remaining half; etc. :-(
Also looking at 2.6.21 ......
Could you also attach your iptables rules? I presume you're doing a pretty straight forward FW (e.g. allow outgoing; drop or block
incoming; check for tcp flags; log martians; etc.)
On 5/2/07, Caleb Cushing < xenoterracide gmail.com">xenoterracide gmail.com
> wrote:I've attached the config, and I haven't noticed any issues with slowness I'm running
2.6.20 on 3 boxes, but not hardened. so it could be a hardened patch. I just know iptables had major changes.
On 5/2/07, 7v5w7go9ub0o < 7v5w7go9ub0o gmail.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">7v5w7go9ub0o gmail.com> wrote:
Thank You!! for the quick response.
Yes.... please do let me see your config file. I've been thinking of doing this for a while, and now is a good time.
Are you running 2.6.20x? If yes, is it as responsive as '18x ?
TIA
On 5/1/07, Caleb Cushing < xenoterracide gmail.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
xenoterracide gmail.com> wrote:
don't know about being slow but iptables had major changes in 2.6.20.x so you probably will have to go through those manually. I can give you my config for iptables if you need help getting it working.
On 5/1/07, 7v5w7go9ub0o < 7v5w7go9ub0o gmail.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">7v5w7go9ub0o gmail.com> wrote:
Just installed 2.6.20-r2, and find it particularly slow - slow to boot, slow to operate (high cpu), while 2.6.18-r6 is quick, with low cpu useage.
Any ideas, please? (e.g. there was a configuration option a few releases ago that snuck in and slowed things down; I've forgotten which it was :-( )
(Same kernel configurations; had to update udev from 104-r12 to 109-r1 to keep from crashing during the boot process; replaced firehol with shorewall 3.4.2, which works on 2.6.18-r6 just fine, but fails on 2.6.20-r2
. Did not upgrade gradm, as it's likely I'll stay with '18)
TIA
-- Caleb Cushing
-- Caleb Cushing
|
| Re: 2.6.20-r2 is slow!? |

|
2007-05-03 19:28:26 |
|
http://slave-network.org/firewall.txt
On 5/3/07, 7v5w7go9ub0o < 7v5w7go9ub0o gmail.com">
7v5w7go9ub0o gmail.com> wrote:Thanks again for the quick reply! It'll be interesting to compare
configs. I have begun the "boolean reduction compilation" process: deactivating half of the grsec/pax stuff; testing; reactivating that
half and deactivating the remaining half; etc. :-(
Also looking at 2.6.21 ......
Could you also attach your iptables rules? I presume you're doing a pretty straight forward FW (e.g. allow outgoing; drop or block
incoming; check for tcp flags; log martians; etc.)
On 5/2/07, Caleb Cushing < xenoterracide gmail.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
xenoterracide gmail.com
> wrote:I've attached the config, and I haven't noticed any issues with slowness I'm running
2.6.20 on 3 boxes, but not hardened. so it could be a hardened patch. I just know iptables had major changes.
On 5/2/07, 7v5w7go9ub0o < 7v5w7go9ub0o gmail.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">7v5w7go9ub0o gmail.com> wrote:
Thank You!! for the quick response.
Yes.... please do let me see your config file. I've been thinking of doing this for a while, and now is a good time.
Are you running 2.6.20x? If yes, is it as responsive as '18x ?
TIA
On 5/1/07, Caleb Cushing < xenoterracide gmail.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
xenoterracide gmail.com> wrote:
don't know about being slow but iptables had major changes in 2.6.20.x so you probably will have to go through those manually. I can give you my config for iptables if you need help getting it working.
On 5/1/07, 7v5w7go9ub0o < 7v5w7go9ub0o gmail.com" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">7v5w7go9ub0o gmail.com> wrote:
Just installed 2.6.20-r2, and find it particularly slow - slow to boot, slow to operate (high cpu), while 2.6.18-r6 is quick, with low cpu useage.
Any ideas, please? (e.g. there was a configuration option a few releases ago that snuck in and slowed things down; I've forgotten which it was :-( )
(Same kernel configurations; had to update udev from 104-r12 to 109-r1 to keep from crashing during the boot process; replaced firehol with shorewall 3.4.2, which works on 2.6.18-r6 just fine, but fails on 2.6.20-r2
. Did not upgrade gradm, as it's likely I'll stay with '18)
TIA
-- Caleb Cushing
-- Caleb Cushing
-- Caleb Cushing
|
| Re: 2.6.20-r2 is slow!? |
  Spain |
2007-05-04 02:16:28 |
El Thu, 3 May 2007 20:28:26 -0400
"Caleb Cushing" <xenoterracide gmail.com> escribió:
> http://slave-ne
twork.org/firewall.txt
Mine here, just in case you want to look at it:
http://www.fl
uzo.org/~javi/firewall.txt
There are some vars written in spanish, but its context is
self-explanatory.
--
echo "dpefsAgmv{p/psh" | perl -pe
's/(.)/chr(ord($1)-1)/ge'
GnuPG key ID 0x6D2FF8B5 pgp.rediris.es
http://www.fluzo.org/
--
gentoo-hardened gentoo.org mailing list
|
|
| Re: 2.6.20-r2 is slow!? |
  United States |
2007-05-04 07:58:59 |
On Fri, 4 May 2007 09:16:28 +0200
Javier Barrio <coder-EYqyydz9ICHYtjvyW6yDsg public.gmane.org> wrote:
> El Thu, 3 May 2007 20:28:26 -0400
> "Caleb Cushing"
> <xenoterracide-Re5JQEeQqe8AvxtiuMwx3w public.gmane.org> escribió:
>
> > http://slave-ne
twork.org/firewall.txt
>
> Mine here, just in case you want to look at it:
>
> http://www.fl
uzo.org/~javi/firewall.txt
>
> There are some vars written in spanish, but its context
is
> self-explanatory.
>
Indeed! Thank you Sir.
(You running the '20x hardened kernel? If so, any issues?)
--
gentoo-hardened gentoo.org mailing list
|
|
| Re: Re: 2.6.20-r2 is slow!? |
  Spain |
2007-05-04 08:35:39 |
> Indeed! Thank you Sir.
>
> (You running the '20x hardened kernel? If so, any
issues?)
That machine is a sparc, so most of the stuff does not work
the same
way. No issues, though.
--
echo "dpefsAgmv{p/psh" | perl -pe
's/(.)/chr(ord($1)-1)/ge'
GnuPG key ID 0x6D2FF8B5 pgp.rediris.es
http://www.fluzo.org/
--
gentoo-hardened gentoo.org mailing list
|
|
| Re: 2.6.20-r2 is slow!? |
  United States |
2007-05-04 10:58:03 |
I just updated to test this as well on a test server. So
far I don't
notice anything out of the ordinary. Can you give me some
idea of what
seems slow? What sort of services are you interacting with?
I've
attached my related configs.
Thanks,
Brian
7v5w7go9ub0o wrote:
> Just installed 2.6.20-r2, and find it particularly slow
- slow to boot,
> slow to operate (high cpu), while 2.6.18-r6 is quick,
with low cpu useage.
>
> Any ideas, please? (e.g. there was a configuration
option a few releases
> ago that snuck in and slowed things down; I've
forgotten which it was :-( )
>
> (Same kernel configurations; had to update udev from
104-r12 to 109-r1
> to keep from crashing during the boot process; replaced
firehol with
> shorewall 3.4.2, which works on 2.6.18-r6 just fine,
but fails on
> 2.6.20-r2 . Did not upgrade gradm, as it's likely I'll
stay with '18)
>
> TIA
|
|
|
[1-10]
|
|