Re: Interrupt storm on net4801

"John Stoffel" <[email protected]> Tue, 20 Jan 2015 12:33:18 -0500
Newsgroups gmane.comp.security.firewalls.m0n0wall
Message-ID <[email protected]>
Tim> I'm testing a net4801 that I bought off Ebay. I have it on my
Tim> internal network, and am downloading large files from another
Tim> server on the WAN side.

What version of m0n0wall are you running in your testing?  

Tim> Firstly, I find that download speed seems to max out at about
Tim> 16Mbps. That seems low for a Net4801 - am I right?  Secondly,
Tim> during testing, the GUI is completely unresponsive. After
Tim> testing, I find log entries like "kernel: interrupt storm
Tim> detected on "irq10:"; throttling interrupt source".  Thirdly, if
Tim> I ping the LAN interface, ping times go from under 1ms to over
Tim> 30ms.

This sounds like you need to switch to/from polling of the network
interfaces.  Have you also made sure that the net4801 is at the latest
firmware version as well?  

Tim> Are all these expected consequences of putting the net4801 under
Tim> heavy load, or does it look like there's a hardware fault
Tim> somewhere? I have a fairly complex setup, with multiple VLANs and
Tim> about 50 firewall rules in total.

I don't think it should do stuff like this, but we'd really have to
know more about your setup and how it's being tested.  

Are you running multiple VLANs on the net4801, or is it just a
firewall?  It almost sounds like you're trying to run it as a
router/possibly with firewall stuff as well.  

John