[Bug 260406] pfctl: Cannot allocate memory (after a time)

From: <bugzilla-noreply_at_freebsd.org>
Date: Fri, 17 Dec 2021 12:12:15 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=260406

--- Comment #16 from tech-lists@zyxst.net ---
(In reply to Kristof Provost from comment #14)

ok it's failing now:

# vmstat -z | grep pf
pf mtags:                48,      0,       0,       0,       0,   0,   0,   0
pf tags:                104,      0,       0,       0,       0,   0,   0,   0
pf states:              312, 100000,      22,     212,   13790,   0,   0,   0
pf state keys:           88,      0,      22,     760,   13790,   0,   0,   0
pf source nodes:        136,  10000,       0,       0,       0,   0,   0,   0
pf table entry counters:     64,      0,       0,       0,       0,   0,   0,  
0
pf table entries:       160, 25400000,   24700,    5400,   58807,   3,   0,   0
pf frags:               248,      0,       0,       0,       0,   0,   0,   0
pf frag entries:         40,   5000,       0,       0,       0,   0,   0,   0

this is with:
in /etc/sysctl.conf: # net.pf.request_maxcount: 25400000
and in /etc/pf.conf: set limit table-entries 25400000

so, doubling it now:
sysctl net.pf.request_maxcount=50800000
net.pf.request_maxcount: 25400000 -> 50800000

and in /etc/pf.conf
set limit table-entries 50800000

pfctl: Cannot allocate memory.

# vmstat -z | grep pf
pf mtags:                48,      0,       0,       0,       0,   0,   0,   0
pf tags:                104,      0,       0,       0,       0,   0,   0,   0
pf states:              312, 100000,      24,     210,   14066,   0,   0,   0
pf state keys:           88,      0,      24,     758,   14066,   0,   0,   0
pf source nodes:        136,  10000,       0,       0,       0,   0,   0,   0
pf table entry counters:     64,      0,       0,       0,       0,   0,   0,  
0
pf table entries:       160, 25400000,   24700,    5400,   58807,   4,   0,   0
pf frags:               248,      0,       0,       0,       0,   0,   0,   0
pf frag entries:         40,   5000,       0,       0,       0,   0,   0,   0
pf state scrubs:         40,      0,       0,       0,       0,   0,   0,   0

-- 
You are receiving this mail because:
You are the assignee for the bug.