Date: Mon, 28 Jun 2021 13:07:29 +0200 From: "Kristof Provost" <kp@FreeBSD.org> To: "=?utf-8?q?=C3=96zkan?= KIRIK" <ozkan.kirik@gmail.com> Cc: freebsd-pf@freebsd.org Subject: Re: pfctl -P -ss -vv -- sometimes eats cpu and becomes unkillable Message-ID: <04DAC68B-C6F0-49AD-B64C-A066F942A855@FreeBSD.org> In-Reply-To: <CAAcX-AE3h9x67_xa5yk4kQqj9RvVqviy8bORLSO4BfxKZTfLmQ@mail.gmail.com> References: <CAAcX-AE3h9x67_xa5yk4kQqj9RvVqviy8bORLSO4BfxKZTfLmQ@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 26 Jun 2021, at 21:38, Özkan KIRIK wrote: > Hi, > > pfctl -P -ss -vv command cannot finish and eats %100 of single core > cpu > when number of states is over 50.000. > Even killall -9 pfctl doesn't help. process cannot be killed. > > I'm using FreeBSD stable/12 that pulled at 2021-06-05. > State policy is configured as floating. I don't know if it matters > switching to if-bound. > > Do you have any suggestions to overcome this problem? > None for now. I’m aware of the problem, it’s still related to nvlists. It’s being worked on right now, but I have no ETA for a fix. — Kristof
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?04DAC68B-C6F0-49AD-B64C-A066F942A855>