Re: SD MythTV, more CPU needed on FW?

JP Vossen <[email protected]>
Newsgroups gmane.comp.security.firewalls.m0n0wall
Message-ID <[email protected]>
Bob McConnell wrote:
> JP Vossen wrote:
>> I recently moved my wireless access point to a dedicated interface on 
>> my M0n0wall generic-pc 1.231 running on an 10 year old OptiPlex Gs+ 
>> P166. (Wow, I'd forgotten how *old* that box was!  M0n0wall works 
>> great, though the GUI is a tad sluggish.)
>>
>> When the WRT54GL wireless AP was directly on the LAN, standard def 
>> MPEG2 played over MythTV perfectly.  Now that I've firewalled it 
>> (separate segment, non-bridged) and opened up TCP/3306 and 
>> TCP/6543-6544 (tried with and w/o 'frag'), playback is too choppy to 
>> watch.  It will play for ~2 seconds, pause for ~2 seconds, etc.
>>
>> I'm only using 21% of memory and CPU load is in the 0-5% range even 
>> when attempting to watch MythTV.  No VPNs, pretty small environment.  
>> FYI the LAN and W_LAN ports are on the same IntelDual (fxp driver) 
>> card (though I know the packets still have to leave the card to go 
>> through packet filtering).  The LAN itself is a D-Link DLI-DGS-1224T 
>> "smart" 10/100/1000 switch, and as noted when everything was local to 
>> that it worked fine (since the limit there was wireless speed).
>>
>> While I admit the FW hardware is ancient (P166!), according to 
>> M0n0wall I'm still barely using it.  Does anyone think throwing 
>> hardware at the firewall will fix this problem?  If so, why, since CPU 
>> and RAM use are so low.  What am I missing?
>>
>> Would the latest M0n0wall beta firmware help?
> 
> The switch is more likely to be the bottleneck. Even if the NIC is 
> capable of full-duplex, there is no guarantee that it works well with 
> that switch.

I'm confused.  MythTV over wireless worked fine when everything was on 
the same (LAN) switch.  Heck, it all worked fine when everything was on 
the same old 10/100 *hub* that I was using until it died last month.  It 
was only when I added the M0n0 into the mix that it stopped working.


 > The first thing I would try is add a second NIC and split
 > the LAN and WAN subnets. You can probably get away with just a
 > turnaround cable on the WAN side if you don't have another hub or
 > switch.

Still confused.  The M0n0 has about 7 NICs, and as previously noted the 
Wireless is on a dedicated NIC/segment.  Maybe the confusion here is 
that I said it's on the same card, but wasn't clear that the card is a 
*dual* port NIC (IntelDual).  Both LAN (fxp2) and W_LAN (fxp3) indicate 
"100baseTX <full-duplex>" in http://m0no/status_interfaces.php.

WORKED:
(LAN switch) <--> WRT54GL (OpenWRT Kamikaze r16206)
       |               |
  [MythTV Backend] [MythTV Client]


Too choppy/jerky to watch:
(LAN switch) <--> [M0n0wall] <--> WRT54GL (OpenWRT Kamikaze r16206)
       |                              |
  [MythTV Backend]               [MythTV Client]


Thanks for thinking about it,
JP
----------------------------|:::======|-------------------------------
JP Vossen, CISSP            |:::======|      http://bashcookbook.com/
My Account, My Opinions     |=========|      http://www.jpsdomain.org/
----------------------------|=========|-------------------------------
"Microsoft Tax" = the additional hardware & yearly fees for the add-on
software required to protect Windows from its own poorly designed and
implemented self, while the overhead incidentally flattens Moore's Law.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.