Date: Thu, 27 Aug 2015 13:32:23 +0000 From: Kolontai Andrej <Andrej.Kolontai@Verwaltung.Uni-Muenchen.DE> To: =?utf-8?B?J0VybWFsIEx1w6dpJw==?= <ermal.luci@gmail.com> Cc: "'freebsd-pf@freebsd.org'" <freebsd-pf@freebsd.org> Subject: RE: Machine freezes when loading pf ruleset Message-ID: <894145A3DDBDEF4880E00D334DCD87263EC83B6C@MXS2.zuv.uni-muenchen.de> In-Reply-To: <CAPBZQG3L75iTF1u6k4WpkpzqaH-y75cW%2BYaEXrMAVx7=QgaEzg@mail.gmail.com> References: <b248a69a-0768-4e55-b2a2-4571e28b858f@CASHTS1.zuv.uni-muenchen.de> <CAE63ME69-J-bh9%2B0cPA6w%2BXAPAm1D08S7uvfi1O9bQyNE_ju1A@mail.gmail.com> <894145A3DDBDEF4880E00D334DCD87263EC814A8@MXS2.zuv.uni-muenchen.de> <CAPBZQG3L75iTF1u6k4WpkpzqaH-y75cW%2BYaEXrMAVx7=QgaEzg@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
>The patch provided at https://reviews.freebsd.org/D3503 should help your case. >During a full ruleset reload, taking into account so many rules, you will impact normal packet processing. >Hence you have the feeling of the box being frozen or not forwarding traffic. >That patch reduces the overhead of reloading a ruleset. >Though even more lock breakdown is necessary on pf(4) but that is another topic. Sounds great. I'll try that. Andrej
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?894145A3DDBDEF4880E00D334DCD87263EC83B6C>