From nobody Wed Dec 15 10:23:50 2021 X-Original-To: bugs@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 0EFC318DD4DF for ; Wed, 15 Dec 2021 10:23:51 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4JDWYf5Mwvz4hFx for ; Wed, 15 Dec 2021 10:23:50 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 9928E1A636 for ; Wed, 15 Dec 2021 10:23:50 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 1BFANoKD087255 for ; Wed, 15 Dec 2021 10:23:50 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 1BFANoxB087254 for bugs@FreeBSD.org; Wed, 15 Dec 2021 10:23:50 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 260406] pfctl: Cannot allocate memory (after a time) Date: Wed, 15 Dec 2021 10:23:50 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: bin X-Bugzilla-Version: CURRENT X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Many People X-Bugzilla-Who: tech-lists@zyxst.net X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: bugs@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Bug reports List-Archive: https://lists.freebsd.org/archives/freebsd-bugs List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-bugs@freebsd.org MIME-Version: 1.0 ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1639563830; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=1KirkacgHrOtpvpd9kJt6eIc1hPg96IA99xtvPas+iU=; b=blaxOMslAHJiXtAyePoB8CP1nhgOiZJn60IwDM1k+jEpbJ1JNHQ03iEgqLUeF03ZF+k0tH wEaiWUS1zacvWfRc3rEmcThA0odew8XrpsPoiU08lL3ZoXl7TLsOm19ROsZxD5X0+BCgWz xpyHgJ3L3A+B+Ax6o7wjP4Qk2zlBPm8zBwoNFp9jaHBGQwKpFbOlMlbm+Jblo7AtVV6ECv JxEzZxPHdzlLSnmwhBr/bWg0vv92Sxl6ssKGB4745GEOjaYWZg/xWSeOiPT3BrS5myZlq9 ZsAW6F2UTRmN5kvU0ktx6atosR53aKDHmMpLMBJ577lsIJLTWT5j9+6jjTWD0A== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1639563830; a=rsa-sha256; cv=none; b=TGj/fxqcOmuv+NyC9vZ/SgdcNU7JgAxlhmgs/UmZ8JV0GdqflKyuSOZ2+1bhUP/hfVouhX l1q7QJ6kIZDHPIqD/BG/WY0RaG9U7TNHZfrMhZ9XbmPO/AVLo7QGw5/S0IJv/11eV4nD6X oUhtLP8zk0kTk06SrdrIFWIHASRsblQeuJVZoS954G6LFw25XGOFZ4N7SHhYUaioKbl7sb OimmczaH8AZcP4fFxv8Rb8IFrMz2QFwwXwOhj5k2Pb0mUgT8/alEijuUOorlrvVCkew+Fx 2CShF5+gZrvsIkbXVe4EUdA7aPGYesQtBk1cLpTH8LY6Lr6DFHnCwwRG2Ubw1A== ARC-Authentication-Results: i=1; mx1.freebsd.org; none X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D260406 --- Comment #13 from tech-lists@zyxst.net --- I'm not sure if the following information is of any use, but thought I'd mention it in case it is: 1. with more or less the same config, but configured to block many more addresses (so the table is many times larger i guess), but on amd64 (freebsd bhyve guest) running 13.0-p5, the command runs without error: pf-badhost 87438 - - Using experimental "aggy" aggregator... 2182 addresses added. 2854 addresses deleted. pf-badhost 87506 - -=20 IPv4 addresses in table: 1044433099 but in dmesg there is the message that pf states limit has been reached. Th= e vm still works/passes traffic though. The vm has 8GB vram. I've not tried increasing that yet. here is pfctl -si # pfctl -si Status: Enabled for 38 days 17:47:57 Debug: Urgent Interface Stats for vtnet0 IPv4 IPv6 Bytes In 2872664371 0 Bytes Out 1616348865 0 Packets In Passed 5573603 0 Blocked 414006 0 Packets Out Passed 6592735 0 Blocked 13559 0 State Table Total Rate current entries 10=20=20=20=20=20=20=20=20=20=20=20= =20=20=20=20 searches 12593897 3.8/s inserts 863091 0.3/s removals 863081 0.3/s Counters match 1290749 0.4/s bad-offset 0 0.0/s fragment 0 0.0/s short 0 0.0/s normalize 6 0.0/s memory 13471 0.0/s bad-timestamp 0 0.0/s congestion 0 0.0/s ip-option 0 0.0/s proto-cksum 0 0.0/s state-mismatch 14 0.0/s state-insert 0 0.0/s state-limit 0 0.0/s src-limit 0 0.0/s synproxy 0 0.0/s map-failed 0 0.0/s --=20 You are receiving this mail because: You are the assignee for the bug.=