Pf in 4.11

[Richard Tector]

Christopher McGee wrote:

> The handbook states that pf is available through KAME in 4.11 and from 
> my reading Kame is build into the system.  How do you enable pf and 
> altq on 4.x then.  I have had trouble finding any how-to's on this 
> since everything for pf points to 5.x.  I just can't justify running 
> 5.x on a production firewall though unless the performance greatly 
> improves over 5.3.

I can push over 300Mbit of sustained TCP traffic through a celeron 1.3 
routing and firewalling with pf. It runs a 3 month old  RELENG_5
What sort of performance issues are you seeing that are stopping you 
from moving to 5.x?

Regards,

Richard Tector