From owner-freebsd-net Thu Aug 2 15:27:48 2001 Delivered-To: freebsd-net@freebsd.org Received: from mailtoaster1.pipeline.ch (mailtoaster1.pipeline.ch [62.48.0.70]) by hub.freebsd.org (Postfix) with SMTP id 03DCD37B405 for ; Thu, 2 Aug 2001 15:27:38 -0700 (PDT) (envelope-from oppermann@telehouse.ch) Received: (qmail 41895 invoked from network); 2 Aug 2001 22:27:11 -0000 Received: from unknown (HELO telehouse.ch) ([62.48.21.178]) (envelope-sender ) by mailtoaster1.pipeline.ch (qmail-ldap-1.03) with SMTP for ; 2 Aug 2001 22:27:11 -0000 Message-ID: <3B69D3C5.3562B7C4@telehouse.ch> Date: Fri, 03 Aug 2001 00:27:17 +0200 From: Andre Oppermann X-Mailer: Mozilla 4.76 [en] (Windows NT 5.0; U) X-Accept-Language: en MIME-Version: 1.0 To: Poul-Henning Kamp Cc: freebsd-hackers@FreeBSD.ORG, freebsd-net@FreeBSD.ORG Subject: Re: 303,000 routes in kernel References: <93100.996790166@critter> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Poul-Henning Kamp wrote: > > In message <3B69CE3F.1BCCB280@telehouse.ch>, Andre Oppermann writes: > > >The problem I've got now is that for every packet I get the kernel is > >making one host entry in the routing table. Because of the many UDP > >DNS requests from all over the world I've got 303'000 (yes, three- > >hundredthreethousand) entries in the kernel routing table which have > >not expired yet. So I'm getting error messages like this now: > > Hmm, I wasn't aware that we cloned routes for UDP packets, are you sure > that is what is causing the routes to exists ? (Just to mention the > obvious: it's not CodeRed probes ?) No, it's not code red probes. My apache log is only 3 Meg in size and has not been rotated in the past 2 month. So, yes, it looks like UDP packets are also generating cloned routes. > You can tweak the route behaviour with some sysctls: > > Notably: > net.inet.ip.rtexpire: 473 > net.inet.ip.rtminexpire: 10 > net.inet.ip.rtmaxcache: 128 Isn't this for fastforwarding? > There's probably also a detailed explanation what they do somewhere... Is there any knob to turn route cloning off? Would that hurt? -- Andre To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message