Date: Fri, 10 Sep 2004 15:51:48 -0400 From: "Don Bowman" <don@sandvine.com> To: "Glenn Dawson" <glenn@antimatter.net>, <freebsd-net@freebsd.org> Subject: RE: dyn buckets Message-ID: <A8535F8D62F3644997E91F4F66E341FC58726F@exchange.sandvine.com>
next in thread | raw e-mail | index | archive | help
From: owner-freebsd-net@freebsd.org > I have a firewall running 4.10 that handles around=20 > 20mbits/sec of traffic=20 > and has around 500 ipfw rules. >=20 > Lately I've noticed that net.inet.ip.fw.curr_dyn_buckets=20 > seems to be maxing=20 > out. I've increased net.inet.ip.fw.dyn_buckets a few times,=20 > but they seem=20 > to max out each time. >=20 > Is there any problem with increasing=20 > net.inet.ip.fw.dyn_buckets far beyond=20 > the default? (I'm at 2048 now) I use=20 net.inet.ip.fw.dyn_buckets=3D16384 net.inet.ip.fw.dyn_syn_lifetime=3D5 net.inet.ip.fw.dyn_max=3D32000
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?A8535F8D62F3644997E91F4F66E341FC58726F>