Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 03 Aug 2001 00:09:26 +0200
From:      Poul-Henning Kamp <phk@critter.freebsd.dk>
To:        Andre Oppermann <oppermann@telehouse.ch>
Cc:        freebsd-hackers@FreeBSD.ORG, freebsd-net@FreeBSD.ORG
Subject:   Re: 303,000 routes in kernel 
Message-ID:  <93100.996790166@critter>
In-Reply-To: Your message of "Fri, 03 Aug 2001 00:03:43 %2B0200." <3B69CE3F.1BCCB280@telehouse.ch> 

next in thread | previous in thread | raw e-mail | index | archive | help
In message <3B69CE3F.1BCCB280@telehouse.ch>, Andre Oppermann writes:

>The problem I've got now is that for every packet I get the kernel is
>making one host entry in the routing table. Because of the many UDP
>DNS requests from all over the world I've got 303'000 (yes, three-
>hundredthreethousand) entries in the kernel routing table which have
>not expired yet. So I'm getting error messages like this now:

Hmm, I wasn't aware that we cloned routes for UDP packets, are you sure
that is what is causing the routes to exists ?   (Just to mention the
obvious: it's not CodeRed probes ?)

You can tweak the route behaviour with some sysctls:

Notably:
	net.inet.ip.rtexpire: 473
	net.inet.ip.rtminexpire: 10
	net.inet.ip.rtmaxcache: 128

There's probably also a detailed explanation what they do somewhere...

-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk@FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?93100.996790166>