From nobody Thu Apr 04 18:36:32 2024 X-Original-To: freebsd-pf@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4V9Vh16bBPz5FmDp for ; Thu, 4 Apr 2024 18:36:33 +0000 (UTC) (envelope-from sm@codenetworks.net) Received: from relayout02-q04.dominioabsoluto.net (relayout02-q04.dominioabsoluto.net [217.116.26.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4V9Vh15jcBz4sdy; Thu, 4 Apr 2024 18:36:33 +0000 (UTC) (envelope-from sm@codenetworks.net) Authentication-Results: mx1.freebsd.org; none Received: from relayout02-redir.dominioabsoluto.net (relayout02-redir.dominioabsoluto.net [217.116.26.75]) by relayout02.dominioabsoluto.net (Postfix) with ESMTP id 4V9Vh05GSRzlWDs; Thu, 4 Apr 2024 20:36:32 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=codenetworks.net; s=domabs; t=1712255792; bh=C2j2DU+fuHSUaTB6O5mAR7F6UhAYqseBUrZJxCVNOPU=; h=Date:Subject:To:References:From:In-Reply-To:From; b=Eg+QwWrlNZZJ14unKA6nLWrZOFN+eUlVeWbHg7rkHi9cWJePmVrzZqw69oLWcbdue yixA+Inv9a/y6uQFzmL7zmqNzYs8B+YzmS9kEgN9GXWYJGTxnq+5+lcjlbmYfM4BCr KZ2nN6C7LZnVzInPrBOWT0qioBCGLp83RnyXfy7Q= Received: from [192.168.3.20] (unknown [188.241.98.123]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: sm.codenetworks.net) by relayout02-dsp.dominioabsoluto.net (Postfix) with ESMTPSA id 4V9Vh02G62zlWDs; Thu, 4 Apr 2024 20:36:32 +0200 (CEST) Message-ID: Date: Thu, 4 Apr 2024 20:36:32 +0200 List-Id: Technical discussion and general questions about packet filter (pf) List-Archive: https://lists.freebsd.org/archives/freebsd-pf List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-pf@freebsd.org X-BeenThere: freebsd-pf@freebsd.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: PF CPS. To: Kristof Provost , freebsd-pf@freebsd.org References: Content-Language: es-ES, en-US From: Santiago Martinez Autocrypt: addr=sm@codenetworks.net; keydata= xsDNBGGx1zYBDAC4jWCD3yN13RQY9C5bsWzwubAkl8zD/t2GOtXZs2oLzmiOVinsTP5HEqko E+BdeprhF4nrWLm/lVOttQpyNWs94U01d4BAg3gMy9MQhZ1JdkhJNYc3CiE/aYytl4ZIF9ju AfSwKr/govkPMtsvipvEBcV8vuCy3EO3c4FsMWrvYRDSI1Gr+7gjAILgzp13Xv1o03aBbL8o XWL3SJPuAchbfeyfeIgOd8LoW8qMfXctXxJb9zfzAzDpUm7ZmQS/YhJ8az5ep3nv0U8M2vza dR18cf12umt8jurdNXFz0Sgs+kmqY6/d/OZzEbTUdH3tZP+n5nVlTGspSUyz/yY39vVKMWfi K1UPAU6qhYQB0AotIMkrL740PsDIXchwrO/nE9Hv4e9c3IznQq1tl4Q7Mn4ipFGqPadveQZz 2l5KRDswqDCm6Rva/Emevynu9fFVtSbNU0LckxNhU/s+60duyG+wimfDc/jH2VmFdhvQxIBL vN1j5N1XqWlyoA189+ThijEAEQEAAc0nU2FudGlhZ28gTWFydGluZXogPHNtQGNvZGVuZXR3 b3Jrcy5uZXQ+wsEPBBMBCAA5FiEEwQCqg+937H/V6G80Fiys1CziDEkFAmGx1zcFCQWjmoAC GwMFCwkIBwIGFQgJCgsCBRYCAwEAAAoJEBYsrNQs4gxJpMUL/Rf/VMXByz+jN6hkuPfGLC1q 5zheK//aZ7ITQ9mkSajVZvU0qCRYQapEOAYe8nv95/VNoTnZb3RHTcx9dJOpDGbCR+FrldlJ eAglOvqwwwSO4vU6PpXw27iDd/Hoohy+ReVtBJwxIOZjRtAmyBBKJLjJBQiQe+xuOzSXeXfA EAM2S+bxmwa8P0l/kbGi/mXlsWDi6zsnXNs9wkq07Z1ZTAGsziQ0tn7ZBRvvxl+dehYaJ/xD 7GBstABqOm04rY4nsHmlhfQo/S92S38dM9H4EG18m1KKJDjHD5+jh/+8ULSH/aGfni6iE8kL oiU/gAS3ROuIBODkA0xVQ8XMj20A4pQDuJIutc5qWSz3M3e8hW3365djJwhrMnwvB2I9VQDp Y3HzDD2RQEPXHkMs7TywL5hxUE5sQy+5ueCJokOl++1IJDvHe3ObAd6YdlTV1my6m2w9XV7Z QEIBEpvNHZMNRxqDKB1fCfwqXgC3Q6S2f1+LycA/tG1kRLXzesyFMBLZ/87AzQRhsdc3AQwA wliyyO46nJw/z/LikDMKkKX5qyx6QiWOF73mWnKcLXfNq2ejD2GYf5cB2DGtbXcOY6AkpB8S yCwBzcfdsGOsObe14dHSZzp5RwxYuJiOmrt4pOjN1BkPmD28e2WrlaXR2ZT73GsZuTLOPHM7 eKZx6YEla1Va5/Oq1bnCXVThsz+hKDgbhArAiFJYitw+Cx31eAkxKpHo/l+fIhaxQTKQnFCI MaklCZMl2uowiFLfZXdBpDD6Zj+sTWPfHqiFh5rhnE57XjonYVhTGxJsFY+pJn7XMT2g344q G3d48grAg2YILG5TfmtVaEKAkNsyJWuLju7KdBiEzMWiSRpkhX4MJjLPUkGUqMZ/cQN/ae8m lTOy5Jd9OhY94uCuDQcIhsOraExmQcek5MlvT9y+2KDKMk/gGL52FkmdlpDlGJJkX8snYqHn 2q27prK+LlMzKlBwvhsfgQINgcqAnKpeNC3o3tQuMRS8CN9bp5/8KbZTr9FGCNqTb3eDuu0r vUP7Y6JNABEBAAHCwPwEGAEIACYWIQTBAKqD73fsf9XobzQWLKzULOIMSQUCYbHXNwUJBaOa gAIbDAAKCRAWLKzULOIMSfpqC/9edCYRJtJrW4tIa31BRp/XxZoVD8q3IFHB8MQ+OS6yOnCO qoi9a2xxuFTEsRiyzdl3/D6YIf7QKVG5izhtFH7q+cLuzusgFhWZDADMcfojmVD7Z/nDPkgy Filc1FSiJf7aCD3iV2dQtV1r8J4Aseso67ge35qcL1QGCKcPubEw3vUM+YE1lhZe2U0PeAfK zIPqYGN1nHtxh4dFmKuHJpNAGHkWCo2RNdkkYR/2qIpOyeSFrRYE2dogYUGLz0Wv2bdm3LCb XbBsFbnpeaTTZ6SNYxyzjoDyRjPtinijbaeXIekJt4lUFZnezGusxMGBSZV+5Ms47aQpzSLp fZVWlMbB2/5mJTUJhJNYAwm2wWPyVcMcuFEriqEXal/xPq5bdK25s7mfHrx4ienGySHUROpX kVxSMw0XUdlEoqpOqCuyrfYNsSUf8ck8ssLeWKpkRKy76oMN76VidVLleT404o8BRSPuuJT5 Gu7Qzc+/hiQrZnxuQ9FhKgfg2W9b7kFM7R0= In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-PostalOut-Country: IP: 188.241.98.123 | Country: ES X-PostalOut-Information: AntiSPAM and AntiVIRUS on relayout02 X-PostalOut-MsgID: 4V9Vh02G62zlWDs.A0C2C X-PostalOut-SpamCheck: no es spam, clean X-PostalOut-From: sm@codenetworks.net X-PostalOut-Watermark: 1712860592.5854@940WBi7bvYXlzLU8F2NLVw X-Spam-Status: No X-Spamd-Bar: ---- X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:16371, ipnet:217.116.24.0/21, country:ES] X-Rspamd-Queue-Id: 4V9Vh15jcBz4sdy Hi , just trying to find out what the current CPS that the firewall is handing. On one side, this is for sizing and to understand if the firewall is getting flooded with new sessions that cannot handle. Doesn't need to be like real-time but the current average is not that helpful. I did some test just opening a 10's sites and session where 3.2 /s, Next week i will have some spare time and will run some Spirent / FortiTester  against OPNSense ( or Vanilla FreeBSD PF) to the reported values vs the one generate by the testers. Br Santi On 4/4/24 14:05, Kristof Provost wrote: > Those counters are averaged, yes. > > What are you trying to accomplish? > > Also, this would be a lot more appropriate on freebsd-pf@. > > Best regards, > Kristof > > On 4 Apr 2024, at 12:07, Santiago Martinez wrote: > >> Hi Kristof, hope you are doing well, >> >> Quick question, do you know if there is KPI for PF to monitor the new session per second? >> >> I can see the inserts and removal from the tables, but the Rate doesn't seem to be accurate or maybe its just an AVG. >> >> Thanks a lot in advance. >> >> Santi