Date: Thu, 12 Jan 2012 22:37:28 +0000 From: "Bjoern A. Zeeb" <bzeeb-lists@lists.zabbadoz.net> To: Matt Lager <mlager@sdunix.com> Cc: freebsd-pf@freebsd.org Subject: Re: PF state key linking mismatch in FreeBSD 9.0-RELEASE Message-ID: <712D195D-B8E5-47ED-BADE-B4037621C71B@lists.zabbadoz.net> In-Reply-To: <4F0F5E20.1030401@sdunix.com> References: <4F0F4B94.10408@sdunix.com> <7534A9A5-D901-43E2-A7D7-3F45699B2C91@lists.zabbadoz.net> <4F0F5E20.1030401@sdunix.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 12. Jan 2012, at 22:26 , Matt Lager wrote: > Interesting. I feel like the performance is degraded quite a bit = between two VPN points that display these messages vs. two VPN points = that don't display these messages, though I could be wrong. Is your = basic suggestion to not consider this a concern and continue forward = with my VPN rollouts? Well as said "can be painful with a slow (serial) console". If you are = triggering the printf per packet and have enough pps your console can = slow things down. The solution probably is to compile your own kernel and either have the = PR problem fixed or the printf removed. The latter can be done quickly = the former needs a bit of time... /bz --=20 Bjoern A. Zeeb You have to have visions! It does not matter how good you are. It matters what good you do!
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?712D195D-B8E5-47ED-BADE-B4037621C71B>