pf causes freeze of amd64 machine on heavy network load

[Björn König]

Max Laier wrote:

> From pf.conf(5):
> BUGS
>      Due to a lock order reversal (LOR) with the socket layer, the use of the
>      group and user filter parameter in conjuction with a Giant-free netstack
>      can result in a deadlock.  If you have to use group or user you must set
>      debug.mpsafenet to ``0'' from the loader(8), for the moment.  This work-
>      around will still produce the LOR, but Giant will protect from the dead-
>      lock.
> 
> I am afraid this is what bites you.

Many thanks for this hint. The impact on performance with 
debug.mpsafenet=0 is not very important to me.

Björn



-- 
Björn König (bkoenig at cs.tu-berlin.de)
student at the Technische Universität Berlin
http://bkoenig.alpha-tierchen.de/