Date: Tue, 3 May 2011 06:29:29 +0000 (UTC) From: Janne Snabb <snabb@epipe.com> To: Vlad Galu <dudu@dudu.ro> Cc: freebsd-stable@freebsd.org, Jeremy Chadwick <freebsd@jdc.parodius.com>, freebsd-pf@freebsd.org Subject: Re: RELENG_8 pf stack issue (state count spiraling out of control) Message-ID: <alpine.BSF.2.00.1105030618250.33272@tiktik.epipe.com> In-Reply-To: <BANLkTi=A8uLW-efz8xZRYS2sGoMq%2BF%2BVhA@mail.gmail.com> References: <20110503015854.GA31444@icarus.home.lan> <BANLkTi=R9fQQZQmLG7HJH%2Bfm3xrJv=HPqA@mail.gmail.com> <20110503060106.GA36331@icarus.home.lan> <BANLkTi=A8uLW-efz8xZRYS2sGoMq%2BF%2BVhA@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 3 May 2011, Vlad Galu wrote: > Disabling scrubbing altogether seems like a good next step. I used to get all kinds of strange problems when I tried scrubbing on FreeBSD 8.1. Especially with IPv6 traffic. After I disabled scrubbing altogether I have had zero problems. The IP & TCP stacks behind this particular pf are good ones anyway, so scrubbing was useless anyway. My belief is that scrubbing is just broken, but I do not have any hard facts about it. I did not bother wasting my time trying to debug it after I noticed that the pf code has not been updated from the upstream for quite a while. The first thing would be to get on the same level with the upstream in case the problem is fixed there. However, I do not want to touch OpenBSD code for personal reasons. -- Janne Snabb / EPIPE Communications snabb@epipe.com - http://epipe.com/
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?alpine.BSF.2.00.1105030618250.33272>