flowtable usable or not

[Doug Barton]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 02/28/2012 15:08, Florian Smeets wrote:

> I talked to Kip Macy, who implemented flowtable, about this. He
> thinks that the problem was caused by inappropriate default setting
> of net.inet.ip.output_flowtable_size. This should have been fixed
> by r205488 which was MFC'd to 8 and should be part of 8.2 and of
> course 9.0. However nobody who experienced the problem wanted to
> try any of these releases with flowtable enabled, so we still don't
> know if it's fixed or not.
> 
> Should anyone try this it could certainly be the case that 
> net.inet.ip.output_flowtable_size needs to be tuned even more.

I tried it, on both FreeBSD routers, web systems, and database
servers; all on 8.2+. It still causes massive instability. Disabling
the sysctl, and/or removing it from the kernel solved the problems.


Doug

- -- 

	It's always a long day; 86400 doesn't fit into a short.

	Breadth of IT experience, and depth of knowledge in the DNS.
	Yours for the right price.  :)  http://SupersetSolutions.com/

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (FreeBSD)

iQEcBAEBCAAGBQJPTdKIAAoJEFzGhvEaGryEHksH/1Hg6TIXLuXf9fUrwsr2Wru3
0qY4MyB6Z0jgXZYqK3QtVd+zzo3LjCbhlN2qUJE/j5eLdROwev+vqdmmKgHRmU5+
lbqIw8t3W9ICobzTxlKmOjJlgBMgrPcX1Dbz0h1+kj26EIJEzThv/l4dxwElm1OT
W6bNvYIsrs/fR7MoYnJAp+frTMiuAx3QACx8YeKDLevKtUK8VmQxRJzZ7f6dFSNm
qtucCnfDyawIomnoRFbWLvA88RoK8gEZ3sYytXb97qB2D0oLkCu3aX6LkaDzFVR5
LrZwtY8gFzSueGEIaxdxZjgEcHMeyXeq3b6MXvxSBGd0QQ0F15ZpDxhBI4jjEI0=
=He/W
-----END PGP SIGNATURE-----