Date: Fri, 11 Dec 2015 22:43:12 +0100 From: Krzysiek <krzysiek@airnet.opole.pl> To: freebsd-pf@freebsd.org Subject: Re: Machine freezes when loading pf ruleset Message-ID: <566B4370.6090309@airnet.opole.pl> In-Reply-To: <894145A3DDBDEF4880E00D334DCD87263EC83B6C@MXS2.zuv.uni-muenchen.de> References: <b248a69a-0768-4e55-b2a2-4571e28b858f@CASHTS1.zuv.uni-muenchen.de> <CAE63ME69-J-bh9%2B0cPA6w%2BXAPAm1D08S7uvfi1O9bQyNE_ju1A@mail.gmail.com> <894145A3DDBDEF4880E00D334DCD87263EC814A8@MXS2.zuv.uni-muenchen.de> <CAPBZQG3L75iTF1u6k4WpkpzqaH-y75cW%2BYaEXrMAVx7=QgaEzg@mail.gmail.com> <894145A3DDBDEF4880E00D334DCD87263EC83B6C@MXS2.zuv.uni-muenchen.de>
next in thread | previous in thread | raw e-mail | index | archive | help
W dniu 2015-08-27 o 15:32, Kolontai Andrej pisze: >> The patch provided at https://reviews.freebsd.org/D3503 should help your case. >> During a full ruleset reload, taking into account so many rules, you will impact normal packet processing. >> Hence you have the feeling of the box being frozen or not forwarding traffic. >> That patch reduces the overhead of reloading a ruleset. >> Though even more lock breakdown is necessary on pf(4) but that is another topic. > Sounds great. I'll try that. > > Andrej > > _______________________________________________ > freebsd-pf@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-pf > To unsubscribe, send any mail to "freebsd-pf-unsubscribe@freebsd.org" Hello, Dear Andrej Please let us know, did the provided patch work for you? I'm experiencing similar problems with 10.2 (r287460M), but my ruleset is just 45 lines (`pfctl -sr | wc -l`). Btw. I'm not using CARP/pfsync, just pf and pflog. Thanks! Best regards Krzysiek Barcikowski
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?566B4370.6090309>