From owner-freebsd-pf@FreeBSD.ORG Thu Sep 6 00:46:04 2007 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 2900E16A418 for ; Thu, 6 Sep 2007 00:46:04 +0000 (UTC) (envelope-from bill.marquette@gmail.com) Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.189]) by mx1.freebsd.org (Postfix) with ESMTP id A4EDF13C45A for ; Thu, 6 Sep 2007 00:46:03 +0000 (UTC) (envelope-from bill.marquette@gmail.com) Received: by nf-out-0910.google.com with SMTP id k4so1841332nfd for ; Wed, 05 Sep 2007 17:45:40 -0700 (PDT) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=IOaAKR24gVrwJbu3MOZo9WaofO7r8S9mDYWrvuqIanvBPFFKDXOtkmJnHhYgZb4cOa6UdWOHcCaAJN529QxLtf2IB7dCYyLqj3MoMdF4VtrTShmlv9xt48ogI0BYH9/cVapGHpEnTu00OlrlQNCtYW79e0Ixn8EwIjod7fbnPbk= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=VXkwmNl8UvHPzZ2nUiRGZtwQ3CuF5UWKUx0223EM2LeavksNbuX/+6yXEGBA8e+ffauHYGGdHpJIaLWFRQztbey9cUoQOMZsEynlmk0IhqASRyNvrgqFeQUCliLJsOPi4tGmCNVvDTOyBrojlmn3n3HFLTWCFePFxJGkXbL47vY= Received: by 10.78.171.13 with SMTP id t13mr5707111hue.1189039540347; Wed, 05 Sep 2007 17:45:40 -0700 (PDT) Received: by 10.78.11.2 with HTTP; Wed, 5 Sep 2007 17:45:40 -0700 (PDT) Message-ID: <55e8a96c0709051745v45a40cf3qb8d9ff9725ad8a55@mail.gmail.com> Date: Wed, 5 Sep 2007 19:45:40 -0500 From: "Bill Marquette" To: "Max Laier" In-Reply-To: <200709052316.41257.max@love2party.net> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <200709052316.41257.max@love2party.net> Cc: freebsd-pf@freebsd.org Subject: Re: pfsync errors X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 06 Sep 2007 00:46:04 -0000 On 9/5/07, Max Laier wrote: > > Another way to go is setting the queuelength for the internal processing > queue to something insanely high (1000+). This will most likely work > around the problem at the cost of burning (mbuf) memory. Assuming mbuf memory is essentially free that's certainly not a problem for me. Is this the max ifqlen patch you had me try last week? If so, what's a reasonably (relative to insanely high :)) number to set that multiplier to? 2 times queue length "helped". I don't want to set it so high that the box panics or something silly :) Or for that matter, stops forwarding traffic while processing. We'll give these patches a try in our lab shortly. We just started getting the Smartbits online to try and duplicate the errors (straight up udp testing can't replicate it). --Bill