Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 14 Oct 2025 23:04:14 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 290243] pf: cannot define table table-name: Cannot allocate memory
Message-ID:  <bug-290243-227@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D290243

            Bug ID: 290243
           Summary: pf: cannot define table table-name: Cannot allocate
                    memory
           Product: Base System
           Version: CURRENT
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: olivier@freebsd.org

Here is a reproducible problem on 14 and current (script attached) on x86 a=
nd
ARM:
We can=E2=80=99t load a table multiples time (like a blacklist table in cro=
ntab).

How to reproduce:

sh ./pf-big-table.sh
Id  Refs Name
535    1 pf
Loading a public IPv4 blocklist
prod_data-shield_ipv4_blocklist.txt                   1390 kB 1150 kBps    =
01s
System=E2=80=99s net.pf.request_maxcount (65535) too small to load this 997=
66 elements
table
Increasing it...
net.pf.request_maxcount: 65535 -> 99767
System configured with net.pf.request_maxcount 65535 loading a 99766 table
multiple times
Try:=E2=80=AF1
current VM usage
ITEM                   SIZE   LIMIT     USED     FREE      REQ FAIL SLEEP X=
DOM
pf table entries:       160, 200000,       0,       0,       0,   0,   0,  =
 0
Try:=E2=80=AF2
current VM usage
ITEM                   SIZE   LIMIT     USED     FREE      REQ FAIL SLEEP X=
DOM
pf table entries:       160, 200000,   99767,      58,   99767,   0,   0,  =
 0
Try:=E2=80=AF3
current VM usage
ITEM                   SIZE   LIMIT     USED     FREE      REQ FAIL SLEEP X=
DOM
pf table entries:       160, 200000,   99767,   99883,  199534,   0,   0,  =
 0
pf.conf:1: cannot define table shield_ipv4.blocklist: Cannot allocate memory
pfctl: Syntax error in config file: pf rules not loaded

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-290243-227>