From owner-freebsd-current@FreeBSD.ORG Wed Feb 29 07:23:55 2012 Return-Path: Delivered-To: current@FreeBSD.org Received: from mx2.freebsd.org (mx2.freebsd.org [IPv6:2001:4f8:fff6::35]) by hub.freebsd.org (Postfix) with ESMTP id 45A21106564A; Wed, 29 Feb 2012 07:23:55 +0000 (UTC) (envelope-from dougb@FreeBSD.org) Received: from 172-17-197-151.globalsuite.net (hub.freebsd.org [IPv6:2001:4f8:fff6::36]) by mx2.freebsd.org (Postfix) with ESMTP id 22B1417755D; Wed, 29 Feb 2012 07:23:53 +0000 (UTC) Message-ID: <4F4DD288.5060106@FreeBSD.org> Date: Tue, 28 Feb 2012 23:23:52 -0800 From: Doug Barton Organization: http://SupersetSolutions.com/ User-Agent: Mozilla/5.0 (X11; FreeBSD i386; rv:10.0.2) Gecko/20120218 Thunderbird/10.0.2 MIME-Version: 1.0 To: Florian Smeets References: <20120221143537.Horde.deyFDZjmRSRPQ52pxBIpnLA@webmail.leidinger.net> <4F4BA707.5070608@wasikowski.net> <4F4C3FE7.3040802@FreeBSD.org> <4F4D51CB.2010508@FreeBSD.org> <4F4D5E5D.9040302@FreeBSD.org> In-Reply-To: <4F4D5E5D.9040302@FreeBSD.org> X-Enigmail-Version: 1.3.5 OpenPGP: id=1A1ABC84 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Cc: stable@FreeBSD.org, current@FreeBSD.org, Steve Wills , =?UTF-8?B?eiBXxIVzaWtvd3NraQ==?= , Arnaud Lacombe , Alexander Leidinger , "Bjoern A. Zeeb" , =?UTF-8?B?xYF1a2Fz?= Subject: Re: flowtable usable or not X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Feb 2012 07:23:55 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 02/28/2012 15:08, Florian Smeets wrote: > I talked to Kip Macy, who implemented flowtable, about this. He > thinks that the problem was caused by inappropriate default setting > of net.inet.ip.output_flowtable_size. This should have been fixed > by r205488 which was MFC'd to 8 and should be part of 8.2 and of > course 9.0. However nobody who experienced the problem wanted to > try any of these releases with flowtable enabled, so we still don't > know if it's fixed or not. > > Should anyone try this it could certainly be the case that > net.inet.ip.output_flowtable_size needs to be tuned even more. I tried it, on both FreeBSD routers, web systems, and database servers; all on 8.2+. It still causes massive instability. Disabling the sysctl, and/or removing it from the kernel solved the problems. Doug - -- It's always a long day; 86400 doesn't fit into a short. Breadth of IT experience, and depth of knowledge in the DNS. Yours for the right price. :) http://SupersetSolutions.com/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.18 (FreeBSD) iQEcBAEBCAAGBQJPTdKIAAoJEFzGhvEaGryEHksH/1Hg6TIXLuXf9fUrwsr2Wru3 0qY4MyB6Z0jgXZYqK3QtVd+zzo3LjCbhlN2qUJE/j5eLdROwev+vqdmmKgHRmU5+ lbqIw8t3W9ICobzTxlKmOjJlgBMgrPcX1Dbz0h1+kj26EIJEzThv/l4dxwElm1OT W6bNvYIsrs/fR7MoYnJAp+frTMiuAx3QACx8YeKDLevKtUK8VmQxRJzZ7f6dFSNm qtucCnfDyawIomnoRFbWLvA88RoK8gEZ3sYytXb97qB2D0oLkCu3aX6LkaDzFVR5 LrZwtY8gFzSueGEIaxdxZjgEcHMeyXeq3b6MXvxSBGd0QQ0F15ZpDxhBI4jjEI0= =He/W -----END PGP SIGNATURE-----