git: 02a12814c14f - main - pf.conf.5: remove incorrect performance comparison
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Wed, 09 Apr 2025 19:30:46 UTC
The branch main has been updated by kp: URL: https://cgit.FreeBSD.org/src/commit/?id=02a12814c14fb699195703a647cf4a0393586ebe commit 02a12814c14fb699195703a647cf4a0393586ebe Author: Kristof Provost <kp@FreeBSD.org> AuthorDate: 2025-04-09 15:28:24 +0000 Commit: Kristof Provost <kp@FreeBSD.org> CommitDate: 2025-04-09 19:30:17 +0000 pf.conf.5: remove incorrect performance comparison In FreeBSD's pf the state lookup is done through a hash table, not an RB tree as on OpenBSD. Remove a misleading line from the man page. Sponsored by: Rubicon Communications, LLC ("Netgate") --- share/man/man5/pf.conf.5 | 4 ---- 1 file changed, 4 deletions(-) diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index bc9157d6a5f8..64da49845a32 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -1659,10 +1659,6 @@ allows echo requests (such as those created by out statefully, and matches incoming echo replies correctly to states. .Pp Also, looking up states is usually faster than evaluating rules. -If there are 50 rules, all of them are evaluated sequentially in O(n). -Even with 50000 states, only 16 comparisons are needed to match a -state, since states are stored in a binary search tree that allows -searches in O(log2 n). .Pp Furthermore, correct handling of ICMP error messages is critical to many protocols, particularly TCP.