SRX Services Gateway
Reply
Trusted Contributor
mawr
Posts: 236
Registered: ‎06-11-2010
0

Slow inter vlan routing performance on SRX100

Greetings,

 

The SRX in question is a SRX100 running 10.2R2.10.  There are two VLANs that are part of a single security zone with SMB traffic flowing between the two.  However the maximum performance I'm able to achieve isn't much more than 4Mbits with 100Mbit FDplx links on both sides.  This confuses me considering that the box is rated at roughly 650Mbps.

 

Due to network design considerations both VLANs can't be assigned to ethernet switching and must be routed.

 

Thanks,

 

mawr

Trusted Contributor
rfrederick
Posts: 213
Registered: ‎07-14-2008
0

Re: Slow inter vlan routing performance on SRX100

Have you checked the interfaces statistics to ensure there is not a speed and / or duplex mismatch?

 

Ron

Trusted Contributor
mawr
Posts: 236
Registered: ‎06-11-2010
0

Re: Slow inter vlan routing performance on SRX100

Here is what I've found so far:

 

As rfrederick suggested I checked and all connections had auto-negotiated to 100Mbps Full Duplex.  Before I manually assigned them though I decided to first check throughput with a utility called PCATTCP.

 

Connected via 802.11n access point

C:\>pcattcp -t 192.168.1.242
PCAUSA Test TCP Utility V2.01.01.14 (IPv4/IPv6)
  IP Version  : IPv4
Started TCP Transmit Test 0...
TCP Transmit Test
  Transmit    : TCPv4 0.0.0.0 -> 192.168.1.242:5001
  Buffer Size : 8192; Alignment: 16384/0
  TCP_NODELAY : DISABLED (0)
  Connect     : Connected to 192.168.1.242:5001
  Send Mode   : Send Pattern; Number of Buffers: 2048
  Statistics  : TCPv4 0.0.0.0 -> 192.168.1.242:5001
16777216 bytes in 4.097 real seconds = 3999.02 KB/sec +++
numCalls: 2048; msec/call: 2.049; calls/sec: 499.878

 

Connected directly via Ethernet

C:\>pcattcp -t 192.168.1.242
PCAUSA Test TCP Utility V2.01.01.14 (IPv4/IPv6)
  IP Version  : IPv4
Started TCP Transmit Test 0...
TCP Transmit Test
  Transmit    : TCPv4 0.0.0.0 -> 192.168.1.242:5001
  Buffer Size : 8192; Alignment: 16384/0
  TCP_NODELAY : DISABLED (0)
  Connect     : Connected to 192.168.1.242:5001
  Send Mode   : Send Pattern; Number of Buffers: 2048
  Statistics  : TCPv4 0.0.0.0 -> 192.168.1.242:5001
16777216 bytes in 1.788 real seconds = 9163.31 KB/sec +++
numCalls: 2048; msec/call: 0.894; calls/sec: 1145.414

 

While the ethernet number isn't near 100Mbps I think it's acceptable considering all of the security policies configured on the device and the 802.11n number being less makes sense as well.

 

Now just to figure out why SMB traffic slows down...

 

mawr

Trusted Contributor
mawr
Posts: 236
Registered: ‎06-11-2010
0

Re: Slow inter vlan routing performance on SRX100

It turns out that the MS-RPC ALG was the problem.  Disabling it resulted in dramatic improvements and for some reason enabling proxy-arp on the source interface also provided a small boost in performance.

 

Thanks,

 

mawr

Trusted Contributor
mawr
Posts: 236
Registered: ‎06-11-2010
0

Re: Slow inter vlan routing performance on SRX100

[ Edited ]

Today I remembered the packet-mode option for stateless filters and enabled such between the internal networks on both interfaces.  Then over the wireless I was able to achieve 9MB/s peak and ~7.5MB/s throughput.

 

My apologies for resurrecting a dead thread but I thought that perhaps this information may be useful to someone.

 

mawr

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.