1.\" Copyright (C) 2001 Matthew Dillon. All rights reserved. 2.\" 3.\" Redistribution and use in source and binary forms, with or without 4.\" modification, are permitted provided that the following conditions 5.\" are met: 6.\" 1. Redistributions of source code must retain the above copyright 7.\" notice, this list of conditions and the following disclaimer. 8.\" 2. Redistributions in binary form must reproduce the above copyright 9.\" notice, this list of conditions and the following disclaimer in the 10.\" documentation and/or other materials provided with the distribution. 11.\" 12.\" THIS SOFTWARE IS PROVIDED BY AUTHOR AND CONTRIBUTORS ``AS IS'' AND 13.\" ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 14.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 15.\" ARE DISCLAIMED. IN NO EVENT SHALL AUTHOR OR CONTRIBUTORS BE LIABLE 16.\" FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 17.\" DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 18.\" OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 19.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 20.\" LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 21.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 22.\" SUCH DAMAGE. 23.\" 24.\" $FreeBSD$ 25.\" 26.Dd December 8, 2012 27.Dt TUNING 7 28.Os 29.Sh NAME 30.Nm tuning 31.Nd performance tuning under FreeBSD 32.Sh SYSTEM SETUP - DISKLABEL, NEWFS, TUNEFS, SWAP 33The swap partition should typically be approximately 2x the size of 34main memory 35for systems with less than 4GB of RAM, or approximately equal to 36the size of main memory 37if you have more. 38Keep in mind future memory 39expansion when sizing the swap partition. 40Configuring too little swap can lead 41to inefficiencies in the VM page scanning code as well as create issues 42later on if you add more memory to your machine. 43On larger systems 44with multiple SCSI disks (or multiple IDE disks operating on different 45controllers), configure swap on each drive. 46The swap partitions on the drives should be approximately the same size. 47The kernel can handle arbitrary sizes but 48internal data structures scale to 4 times the largest swap partition. 49Keeping 50the swap partitions near the same size will allow the kernel to optimally 51stripe swap space across the N disks. 52Do not worry about overdoing it a 53little, swap space is the saving grace of 54.Ux 55and even if you do not normally use much swap, it can give you more time to 56recover from a runaway program before being forced to reboot. 57.Pp 58It is not a good idea to make one large partition. 59First, 60each partition has different operational characteristics and separating them 61allows the file system to tune itself to those characteristics. 62For example, 63the root and 64.Pa /usr 65partitions are read-mostly, with very little writing, while 66a lot of reading and writing could occur in 67.Pa /var/tmp . 68By properly 69partitioning your system fragmentation introduced in the smaller more 70heavily write-loaded partitions will not bleed over into the mostly-read 71partitions. 72.Pp 73Properly partitioning your system also allows you to tune 74.Xr newfs 8 , 75and 76.Xr tunefs 8 77parameters. 78The only 79.Xr tunefs 8 80option worthwhile turning on is 81.Em softupdates 82with 83.Dq Li "tunefs -n enable /filesystem" . 84Softupdates drastically improves meta-data performance, mainly file 85creation and deletion. 86We recommend enabling softupdates on most file systems; however, there 87are two limitations to softupdates that you should be aware of when 88determining whether to use it on a file system. 89First, softupdates guarantees file system consistency in the 90case of a crash but could very easily be several seconds (even a minute!\&) 91behind on pending write to the physical disk. 92If you crash you may lose more work 93than otherwise. 94Secondly, softupdates delays the freeing of file system 95blocks. 96If you have a file system (such as the root file system) which is 97close to full, doing a major update of it, e.g.,\& 98.Dq Li "make installworld" , 99can run it out of space and cause the update to fail. 100For this reason, softupdates will not be enabled on the root file system 101during a typical install. 102There is no loss of performance since the root 103file system is rarely written to. 104.Pp 105A number of run-time 106.Xr mount 8 107options exist that can help you tune the system. 108The most obvious and most dangerous one is 109.Cm async . 110Only use this option in conjunction with 111.Xr gjournal 8 , 112as it is far too dangerous on a normal file system. 113A less dangerous and more 114useful 115.Xr mount 8 116option is called 117.Cm noatime . 118.Ux 119file systems normally update the last-accessed time of a file or 120directory whenever it is accessed. 121This operation is handled in 122.Fx 123with a delayed write and normally does not create a burden on the system. 124However, if your system is accessing a huge number of files on a continuing 125basis the buffer cache can wind up getting polluted with atime updates, 126creating a burden on the system. 127For example, if you are running a heavily 128loaded web site, or a news server with lots of readers, you might want to 129consider turning off atime updates on your larger partitions with this 130.Xr mount 8 131option. 132However, you should not gratuitously turn off atime 133updates everywhere. 134For example, the 135.Pa /var 136file system customarily 137holds mailboxes, and atime (in combination with mtime) is used to 138determine whether a mailbox has new mail. 139You might as well leave 140atime turned on for mostly read-only partitions such as 141.Pa / 142and 143.Pa /usr 144as well. 145This is especially useful for 146.Pa / 147since some system utilities 148use the atime field for reporting. 149.Sh STRIPING DISKS 150In larger systems you can stripe partitions from several drives together 151to create a much larger overall partition. 152Striping can also improve 153the performance of a file system by splitting I/O operations across two 154or more disks. 155The 156.Xr gstripe 8 , 157.Xr gvinum 8 , 158and 159.Xr ccdconfig 8 160utilities may be used to create simple striped file systems. 161Generally 162speaking, striping smaller partitions such as the root and 163.Pa /var/tmp , 164or essentially read-only partitions such as 165.Pa /usr 166is a complete waste of time. 167You should only stripe partitions that require serious I/O performance, 168typically 169.Pa /var , /home , 170or custom partitions used to hold databases and web pages. 171Choosing the proper stripe size is also 172important. 173File systems tend to store meta-data on power-of-2 boundaries 174and you usually want to reduce seeking rather than increase seeking. 175This 176means you want to use a large off-center stripe size such as 1152 sectors 177so sequential I/O does not seek both disks and so meta-data is distributed 178across both disks rather than concentrated on a single disk. 179If 180you really need to get sophisticated, we recommend using a real hardware 181RAID controller from the list of 182.Fx 183supported controllers. 184.Sh SYSCTL TUNING 185.Xr sysctl 8 186variables permit system behavior to be monitored and controlled at 187run-time. 188Some sysctls simply report on the behavior of the system; others allow 189the system behavior to be modified; 190some may be set at boot time using 191.Xr rc.conf 5 , 192but most will be set via 193.Xr sysctl.conf 5 . 194There are several hundred sysctls in the system, including many that appear 195to be candidates for tuning but actually are not. 196In this document we will only cover the ones that have the greatest effect 197on the system. 198.Pp 199The 200.Va vm.overcommit 201sysctl defines the overcommit behaviour of the vm subsystem. 202The virtual memory system always does accounting of the swap space 203reservation, both total for system and per-user. 204Corresponding values 205are available through sysctl 206.Va vm.swap_total , 207that gives the total bytes available for swapping, and 208.Va vm.swap_reserved , 209that gives number of bytes that may be needed to back all currently 210allocated anonymous memory. 211.Pp 212Setting bit 0 of the 213.Va vm.overcommit 214sysctl causes the virtual memory system to return failure 215to the process when allocation of memory causes 216.Va vm.swap_reserved 217to exceed 218.Va vm.swap_total . 219Bit 1 of the sysctl enforces 220.Dv RLIMIT_SWAP 221limit 222(see 223.Xr getrlimit 2 ) . 224Root is exempt from this limit. 225Bit 2 allows to count most of the physical 226memory as allocatable, except wired and free reserved pages 227(accounted by 228.Va vm.stats.vm.v_free_target 229and 230.Va vm.stats.vm.v_wire_count 231sysctls, respectively). 232.Pp 233The 234.Va kern.ipc.maxpipekva 235loader tunable is used to set a hard limit on the 236amount of kernel address space allocated to mapping of pipe buffers. 237Use of the mapping allows the kernel to eliminate a copy of the 238data from writer address space into the kernel, directly copying 239the content of mapped buffer to the reader. 240Increasing this value to a higher setting, such as `25165824' might 241improve performance on systems where space for mapping pipe buffers 242is quickly exhausted. 243This exhaustion is not fatal; however, and it will only cause pipes 244to fall back to using double-copy. 245.Pp 246The 247.Va kern.ipc.shm_use_phys 248sysctl defaults to 0 (off) and may be set to 0 (off) or 1 (on). 249Setting 250this parameter to 1 will cause all System V shared memory segments to be 251mapped to unpageable physical RAM. 252This feature only has an effect if you 253are either (A) mapping small amounts of shared memory across many (hundreds) 254of processes, or (B) mapping large amounts of shared memory across any 255number of processes. 256This feature allows the kernel to remove a great deal 257of internal memory management page-tracking overhead at the cost of wiring 258the shared memory into core, making it unswappable. 259.Pp 260The 261.Va vfs.vmiodirenable 262sysctl defaults to 1 (on). 263This parameter controls how directories are cached 264by the system. 265Most directories are small and use but a single fragment 266(typically 2K) in the file system and even less (typically 512 bytes) in 267the buffer cache. 268However, when operating in the default mode the buffer 269cache will only cache a fixed number of directories even if you have a huge 270amount of memory. 271Turning on this sysctl allows the buffer cache to use 272the VM Page Cache to cache the directories. 273The advantage is that all of 274memory is now available for caching directories. 275The disadvantage is that 276the minimum in-core memory used to cache a directory is the physical page 277size (typically 4K) rather than 512 bytes. 278We recommend turning this option off in memory-constrained environments; 279however, when on, it will substantially improve the performance of services 280that manipulate a large number of files. 281Such services can include web caches, large mail systems, and news systems. 282Turning on this option will generally not reduce performance even with the 283wasted memory but you should experiment to find out. 284.Pp 285The 286.Va vfs.write_behind 287sysctl defaults to 1 (on). 288This tells the file system to issue media 289writes as full clusters are collected, which typically occurs when writing 290large sequential files. 291The idea is to avoid saturating the buffer 292cache with dirty buffers when it would not benefit I/O performance. 293However, 294this may stall processes and under certain circumstances you may wish to turn 295it off. 296.Pp 297The 298.Va vfs.hirunningspace 299sysctl determines how much outstanding write I/O may be queued to 300disk controllers system-wide at any given time. 301It is used by the UFS file system. 302The default is self-tuned and 303usually sufficient but on machines with advanced controllers and lots 304of disks this may be tuned up to match what the controllers buffer. 305Configuring this setting to match tagged queuing capabilities of 306controllers or drives with average IO size used in production works 307best (for example: 16 MiB will use 128 tags with IO requests of 128 KiB). 308Note that setting too high a value 309(exceeding the buffer cache's write threshold) can lead to extremely 310bad clustering performance. 311Do not set this value arbitrarily high! 312Higher write queuing values may also add latency to reads occurring at 313the same time. 314.Pp 315The 316.Va vfs.read_max 317sysctl governs VFS read-ahead and is expressed as the number of blocks 318to pre-read if the heuristics algorithm decides that the reads are 319issued sequentially. 320It is used by the UFS, ext2fs and msdosfs file systems. 321With the default UFS block size of 32 KiB, a setting of 64 will allow 322speculatively reading up to 2 MiB. 323This setting may be increased to get around disk I/O latencies, especially 324where these latencies are large such as in virtual machine emulated 325environments. 326It may be tuned down in specific cases where the I/O load is such that 327read-ahead adversely affects performance or where system memory is really 328low. 329.Pp 330The 331.Va vfs.ncsizefactor 332sysctl defines how large VFS namecache may grow. 333The number of currently allocated entries in namecache is provided by 334.Va debug.numcache 335sysctl and the condition 336debug.numcache < kern.maxvnodes * vfs.ncsizefactor 337is adhered to. 338.Pp 339The 340.Va vfs.ncnegfactor 341sysctl defines how many negative entries VFS namecache is allowed to create. 342The number of currently allocated negative entries is provided by 343.Va debug.numneg 344sysctl and the condition 345vfs.ncnegfactor * debug.numneg < debug.numcache 346is adhered to. 347.Pp 348There are various other buffer-cache and VM page cache related sysctls. 349We do not recommend modifying these values. 350As of 351.Fx 4.3 , 352the VM system does an extremely good job tuning itself. 353.Pp 354The 355.Va net.inet.tcp.sendspace 356and 357.Va net.inet.tcp.recvspace 358sysctls are of particular interest if you are running network intensive 359applications. 360They control the amount of send and receive buffer space 361allowed for any given TCP connection. 362The default sending buffer is 32K; the default receiving buffer 363is 64K. 364You can often 365improve bandwidth utilization by increasing the default at the cost of 366eating up more kernel memory for each connection. 367We do not recommend 368increasing the defaults if you are serving hundreds or thousands of 369simultaneous connections because it is possible to quickly run the system 370out of memory due to stalled connections building up. 371But if you need 372high bandwidth over a fewer number of connections, especially if you have 373gigabit Ethernet, increasing these defaults can make a huge difference. 374You can adjust the buffer size for incoming and outgoing data separately. 375For example, if your machine is primarily doing web serving you may want 376to decrease the recvspace in order to be able to increase the 377sendspace without eating too much kernel memory. 378Note that the routing table (see 379.Xr route 8 ) 380can be used to introduce route-specific send and receive buffer size 381defaults. 382.Pp 383As an additional management tool you can use pipes in your 384firewall rules (see 385.Xr ipfw 8 ) 386to limit the bandwidth going to or from particular IP blocks or ports. 387For example, if you have a T1 you might want to limit your web traffic 388to 70% of the T1's bandwidth in order to leave the remainder available 389for mail and interactive use. 390Normally a heavily loaded web server 391will not introduce significant latencies into other services even if 392the network link is maxed out, but enforcing a limit can smooth things 393out and lead to longer term stability. 394Many people also enforce artificial 395bandwidth limitations in order to ensure that they are not charged for 396using too much bandwidth. 397.Pp 398Setting the send or receive TCP buffer to values larger than 65535 will result 399in a marginal performance improvement unless both hosts support the window 400scaling extension of the TCP protocol, which is controlled by the 401.Va net.inet.tcp.rfc1323 402sysctl. 403These extensions should be enabled and the TCP buffer size should be set 404to a value larger than 65536 in order to obtain good performance from 405certain types of network links; specifically, gigabit WAN links and 406high-latency satellite links. 407RFC1323 support is enabled by default. 408.Pp 409The 410.Va net.inet.tcp.always_keepalive 411sysctl determines whether or not the TCP implementation should attempt 412to detect dead TCP connections by intermittently delivering 413.Dq keepalives 414on the connection. 415By default, this is enabled for all applications; by setting this 416sysctl to 0, only applications that specifically request keepalives 417will use them. 418In most environments, TCP keepalives will improve the management of 419system state by expiring dead TCP connections, particularly for 420systems serving dialup users who may not always terminate individual 421TCP connections before disconnecting from the network. 422However, in some environments, temporary network outages may be 423incorrectly identified as dead sessions, resulting in unexpectedly 424terminated TCP connections. 425In such environments, setting the sysctl to 0 may reduce the occurrence of 426TCP session disconnections. 427.Pp 428The 429.Va net.inet.tcp.delayed_ack 430TCP feature is largely misunderstood. 431Historically speaking, this feature 432was designed to allow the acknowledgement to transmitted data to be returned 433along with the response. 434For example, when you type over a remote shell, 435the acknowledgement to the character you send can be returned along with the 436data representing the echo of the character. 437With delayed acks turned off, 438the acknowledgement may be sent in its own packet, before the remote service 439has a chance to echo the data it just received. 440This same concept also 441applies to any interactive protocol (e.g.,\& SMTP, WWW, POP3), and can cut the 442number of tiny packets flowing across the network in half. 443The 444.Fx 445delayed ACK implementation also follows the TCP protocol rule that 446at least every other packet be acknowledged even if the standard 100ms 447timeout has not yet passed. 448Normally the worst a delayed ACK can do is 449slightly delay the teardown of a connection, or slightly delay the ramp-up 450of a slow-start TCP connection. 451While we are not sure we believe that 452the several FAQs related to packages such as SAMBA and SQUID which advise 453turning off delayed acks may be referring to the slow-start issue. 454In 455.Fx , 456it would be more beneficial to increase the slow-start flightsize via 457the 458.Va net.inet.tcp.slowstart_flightsize 459sysctl rather than disable delayed acks. 460.Pp 461The 462.Va net.inet.ip.portrange.* 463sysctls control the port number ranges automatically bound to TCP and UDP 464sockets. 465There are three ranges: a low range, a default range, and a 466high range, selectable via the 467.Dv IP_PORTRANGE 468.Xr setsockopt 2 469call. 470Most 471network programs use the default range which is controlled by 472.Va net.inet.ip.portrange.first 473and 474.Va net.inet.ip.portrange.last , 475which default to 49152 and 65535, respectively. 476Bound port ranges are 477used for outgoing connections, and it is possible to run the system out 478of ports under certain circumstances. 479This most commonly occurs when you are 480running a heavily loaded web proxy. 481The port range is not an issue 482when running a server which handles mainly incoming connections, such as a 483normal web server, or has a limited number of outgoing connections, such 484as a mail relay. 485For situations where you may run out of ports, 486we recommend decreasing 487.Va net.inet.ip.portrange.first 488modestly. 489A range of 10000 to 30000 ports may be reasonable. 490You should also consider firewall effects when changing the port range. 491Some firewalls 492may block large ranges of ports (usually low-numbered ports) and expect systems 493to use higher ranges of ports for outgoing connections. 494By default 495.Va net.inet.ip.portrange.last 496is set at the maximum allowable port number. 497.Pp 498The 499.Va kern.ipc.somaxconn 500sysctl limits the size of the listen queue for accepting new TCP connections. 501The default value of 128 is typically too low for robust handling of new 502connections in a heavily loaded web server environment. 503For such environments, 504we recommend increasing this value to 1024 or higher. 505The service daemon 506may itself limit the listen queue size (e.g.,\& 507.Xr sendmail 8 , 508apache) but will 509often have a directive in its configuration file to adjust the queue size up. 510Larger listen queues also do a better job of fending off denial of service 511attacks. 512.Pp 513The 514.Va kern.maxfiles 515sysctl determines how many open files the system supports. 516The default is 517typically a few thousand but you may need to bump this up to ten or twenty 518thousand if you are running databases or large descriptor-heavy daemons. 519The read-only 520.Va kern.openfiles 521sysctl may be interrogated to determine the current number of open files 522on the system. 523.Pp 524The 525.Va vm.swap_idle_enabled 526sysctl is useful in large multi-user systems where you have lots of users 527entering and leaving the system and lots of idle processes. 528Such systems 529tend to generate a great deal of continuous pressure on free memory reserves. 530Turning this feature on and adjusting the swapout hysteresis (in idle 531seconds) via 532.Va vm.swap_idle_threshold1 533and 534.Va vm.swap_idle_threshold2 535allows you to depress the priority of pages associated with idle processes 536more quickly then the normal pageout algorithm. 537This gives a helping hand 538to the pageout daemon. 539Do not turn this option on unless you need it, 540because the tradeoff you are making is to essentially pre-page memory sooner 541rather than later, eating more swap and disk bandwidth. 542In a small system 543this option will have a detrimental effect but in a large system that is 544already doing moderate paging this option allows the VM system to stage 545whole processes into and out of memory more easily. 546.Sh LOADER TUNABLES 547Some aspects of the system behavior may not be tunable at runtime because 548memory allocations they perform must occur early in the boot process. 549To change loader tunables, you must set their values in 550.Xr loader.conf 5 551and reboot the system. 552.Pp 553.Va kern.maxusers 554controls the scaling of a number of static system tables, including defaults 555for the maximum number of open files, sizing of network memory resources, etc. 556As of 557.Fx 4.5 , 558.Va kern.maxusers 559is automatically sized at boot based on the amount of memory available in 560the system, and may be determined at run-time by inspecting the value of the 561read-only 562.Va kern.maxusers 563sysctl. 564Some sites will require larger or smaller values of 565.Va kern.maxusers 566and may set it as a loader tunable; values of 64, 128, and 256 are not 567uncommon. 568We do not recommend going above 256 unless you need a huge number 569of file descriptors; many of the tunable values set to their defaults by 570.Va kern.maxusers 571may be individually overridden at boot-time or run-time as described 572elsewhere in this document. 573Systems older than 574.Fx 4.4 575must set this value via the kernel 576.Xr config 8 577option 578.Cd maxusers 579instead. 580.Pp 581The 582.Va kern.dfldsiz 583and 584.Va kern.dflssiz 585tunables set the default soft limits for process data and stack size 586respectively. 587Processes may increase these up to the hard limits by calling 588.Xr setrlimit 2 . 589The 590.Va kern.maxdsiz , 591.Va kern.maxssiz , 592and 593.Va kern.maxtsiz 594tunables set the hard limits for process data, stack, and text size 595respectively; processes may not exceed these limits. 596The 597.Va kern.sgrowsiz 598tunable controls how much the stack segment will grow when a process 599needs to allocate more stack. 600.Pp 601.Va kern.ipc.nmbclusters 602may be adjusted to increase the number of network mbufs the system is 603willing to allocate. 604Each cluster represents approximately 2K of memory, 605so a value of 1024 represents 2M of kernel memory reserved for network 606buffers. 607You can do a simple calculation to figure out how many you need. 608If you have a web server which maxes out at 1000 simultaneous connections, 609and each connection eats a 16K receive and 16K send buffer, you need 610approximately 32MB worth of network buffers to deal with it. 611A good rule of 612thumb is to multiply by 2, so 32MBx2 = 64MB/2K = 32768. 613So for this case 614you would want to set 615.Va kern.ipc.nmbclusters 616to 32768. 617We recommend values between 6181024 and 4096 for machines with moderates amount of memory, and between 4096 619and 32768 for machines with greater amounts of memory. 620Under no circumstances 621should you specify an arbitrarily high value for this parameter, it could 622lead to a boot-time crash. 623The 624.Fl m 625option to 626.Xr netstat 1 627may be used to observe network cluster use. 628Older versions of 629.Fx 630do not have this tunable and require that the 631kernel 632.Xr config 8 633option 634.Dv NMBCLUSTERS 635be set instead. 636.Pp 637More and more programs are using the 638.Xr sendfile 2 639system call to transmit files over the network. 640The 641.Va kern.ipc.nsfbufs 642sysctl controls the number of file system buffers 643.Xr sendfile 2 644is allowed to use to perform its work. 645This parameter nominally scales 646with 647.Va kern.maxusers 648so you should not need to modify this parameter except under extreme 649circumstances. 650See the 651.Sx TUNING 652section in the 653.Xr sendfile 2 654manual page for details. 655.Sh KERNEL CONFIG TUNING 656There are a number of kernel options that you may have to fiddle with in 657a large-scale system. 658In order to change these options you need to be 659able to compile a new kernel from source. 660The 661.Xr config 8 662manual page and the handbook are good starting points for learning how to 663do this. 664Generally the first thing you do when creating your own custom 665kernel is to strip out all the drivers and services you do not use. 666Removing things like 667.Dv INET6 668and drivers you do not have will reduce the size of your kernel, sometimes 669by a megabyte or more, leaving more memory available for applications. 670.Pp 671.Dv SCSI_DELAY 672may be used to reduce system boot times. 673The defaults are fairly high and 674can be responsible for 5+ seconds of delay in the boot process. 675Reducing 676.Dv SCSI_DELAY 677to something below 5 seconds could work (especially with modern drives). 678.Pp 679There are a number of 680.Dv *_CPU 681options that can be commented out. 682If you only want the kernel to run 683on a Pentium class CPU, you can easily remove 684.Dv I486_CPU , 685but only remove 686.Dv I586_CPU 687if you are sure your CPU is being recognized as a Pentium II or better. 688Some clones may be recognized as a Pentium or even a 486 and not be able 689to boot without those options. 690If it works, great! 691The operating system 692will be able to better use higher-end CPU features for MMU, task switching, 693timebase, and even device operations. 694Additionally, higher-end CPUs support 6954MB MMU pages, which the kernel uses to map the kernel itself into memory, 696increasing its efficiency under heavy syscall loads. 697.Sh CPU, MEMORY, DISK, NETWORK 698The type of tuning you do depends heavily on where your system begins to 699bottleneck as load increases. 700If your system runs out of CPU (idle times 701are perpetually 0%) then you need to consider upgrading the CPU 702or perhaps you need to revisit the 703programs that are causing the load and try to optimize them. 704If your system 705is paging to swap a lot you need to consider adding more memory. 706If your 707system is saturating the disk you typically see high CPU idle times and 708total disk saturation. 709.Xr systat 1 710can be used to monitor this. 711There are many solutions to saturated disks: 712increasing memory for caching, mirroring disks, distributing operations across 713several machines, and so forth. 714If disk performance is an issue and you 715are using IDE drives, switching to SCSI can help a great deal. 716While modern 717IDE drives compare with SCSI in raw sequential bandwidth, the moment you 718start seeking around the disk SCSI drives usually win. 719.Pp 720Finally, you might run out of network suds. 721Optimize the network path 722as much as possible. 723For example, in 724.Xr firewall 7 725we describe a firewall protecting internal hosts with a topology where 726the externally visible hosts are not routed through it. 727Use 1000BaseT rather 728than 100BaseT, depending on your needs. 729Most bottlenecks occur at the WAN link (e.g.,\& 730modem, T1, DSL, whatever). 731If expanding the link is not an option it may be possible to use the 732.Xr dummynet 4 733feature to implement peak shaving or other forms of traffic shaping to 734prevent the overloaded service (such as web services) from affecting other 735services (such as email), or vice versa. 736In home installations this could 737be used to give interactive traffic (your browser, 738.Xr ssh 1 739logins) priority 740over services you export from your box (web services, email). 741.Sh SEE ALSO 742.Xr netstat 1 , 743.Xr systat 1 , 744.Xr sendfile 2 , 745.Xr ata 4 , 746.Xr dummynet 4 , 747.Xr login.conf 5 , 748.Xr rc.conf 5 , 749.Xr sysctl.conf 5 , 750.Xr firewall 7 , 751.Xr eventtimers 7 , 752.Xr hier 7 , 753.Xr ports 7 , 754.Xr boot 8 , 755.Xr bsdinstall 8 , 756.Xr bsdlabel 8 , 757.Xr ccdconfig 8 , 758.Xr config 8 , 759.Xr fsck 8 , 760.Xr gjournal 8 , 761.Xr gstripe 8 , 762.Xr gvinum 8 , 763.Xr ifconfig 8 , 764.Xr ipfw 8 , 765.Xr loader 8 , 766.Xr mount 8 , 767.Xr newfs 8 , 768.Xr route 8 , 769.Xr sysctl 8 , 770.Xr tunefs 8 771.Sh HISTORY 772The 773.Nm 774manual page was originally written by 775.An Matthew Dillon 776and first appeared 777in 778.Fx 4.3 , 779May 2001. 780The manual page was greatly modified by 781.An Eitan Adler Aq Mt eadler@FreeBSD.org . 782