pfsync errors
Max Laier
max at love2party.net
Thu Sep 6 14:04:32 PDT 2007
On Thursday 06 September 2007, Bill Marquette wrote:
> On 9/5/07, Max Laier <max at love2party.net> wrote:
> > Another way to go is setting the queuelength for the internal
> > processing queue to something insanely high (1000+). This will most
> > likely work around the problem at the cost of burning (mbuf) memory.
>
> Assuming mbuf memory is essentially free that's certainly not a
> problem for me. Is this the max ifqlen patch you had me try last
> week? If so, what's a reasonably (relative to insanely high :))
> number to set that multiplier to? 2 times queue length "helped". I
> don't want to set it so high that the box panics or something silly :)
> Or for that matter, stops forwarding traffic while processing. We'll
> give these patches a try in our lab shortly. We just started getting
> the Smartbits online to try and duplicate the errors (straight up udp
> testing can't replicate it).
Try 1000 (or 20 * maxifqlen iirc).
--
/"\ Best regards, | mlaier at freebsd.org
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | mlaier at EFnet
/ \ ASCII Ribbon Campaign | Against HTML Mail and News
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: This is a digitally signed message part.
Url : http://lists.freebsd.org/pipermail/freebsd-pf/attachments/20070906/a09f73cd/attachment.pgp
More information about the freebsd-pf
mailing list