From owner-freebsd-pf@FreeBSD.ORG Wed May 15 15:32:09 2013 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 04619508 for ; Wed, 15 May 2013 15:32:09 +0000 (UTC) (envelope-from manoj.ganesan@gmail.com) Received: from mail-lb0-f176.google.com (mail-lb0-f176.google.com [209.85.217.176]) by mx1.freebsd.org (Postfix) with ESMTP id 872A37AE for ; Wed, 15 May 2013 15:32:08 +0000 (UTC) Received: by mail-lb0-f176.google.com with SMTP id x10so2026156lbi.35 for ; Wed, 15 May 2013 08:32:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:mime-version:from:date:message-id:subject:to :content-type; bh=6FisOAyl2jRUcpCKxn5olOtH0GWHFbaM5F0kxZGoMWY=; b=wLN8w5WQEqO5AXZ+HT72w7mmXnuBnbNkYQJq54QQBMnYVYvcZZT6z3ScsaMqOqLznI iW4ARBbcfxfbdPKAJHmf+l1lhiTd5rix6NOYtwi5DHUj/FEfI1WnWtNjda+5EtDFN2rx k1OEpYjY2vrEML3r58oA99yRvik/Pc00Z3DEqV180+GZy97tTXVB4lnMieIy3ATzKDL7 SFrx15f2lcOjoprJRaPi/qbcyvksXbFyHBZ+c5aBgukygj74ZrLII+7ni51pcJHBeq6q 7i71VmldDHHaYK0RugG988EsS+HBX7F/OHaXCaObbxp1Evw97AbKnR5nH+ertj+F55pJ 00Fg== X-Received: by 10.112.159.136 with SMTP id xc8mr17552294lbb.57.1368631926468; Wed, 15 May 2013 08:32:06 -0700 (PDT) MIME-Version: 1.0 Received: by 10.112.22.39 with HTTP; Wed, 15 May 2013 08:31:46 -0700 (PDT) From: Manoj Ganesan Date: Wed, 15 May 2013 10:31:46 -0500 Message-ID: Subject: Reloading anchors with many streams To: freebsd-pf@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.14 X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 May 2013 15:32:09 -0000 Hey everyone, I'm just beginning to use FreeBSD + PF, for a use-case of multiple (1000s of) UDP streams, each attached via an anchor. When I unload/flush one of these anchors (say I tear down a stream), does it affect the other streams enough to create jitter? In general, does reloading or manipulating an anchor cause the other connections to be affected negatively? Also, design-wise is this an okay approach, where I have to bring-up/tear-down streams on the fly, and I use anchors for the purpose? Thanks, Manoj