kern/152887: IPFW: Can not set more then 1024 buckets with buckets flag

[Boris Kovalenko]

>Number:         152887
>Category:       kern
>Synopsis:       IPFW: Can not set more then 1024 buckets with buckets flag
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Dec 07 12:50:10 UTC 2010
>Closed-Date:
>Last-Modified:
>Originator:     Boris Kovalenko
>Release:        8.1-RELEASE
>Organization:
JSC "TAGNet"
>Environment:
FreeBSD vpn.tagnet.hn 8.1-RELEASE FreeBSD 8.1-RELEASE #1: Mon Dec  6 14:01:28 YEKT 2010     root at vpn.tagnet.hn:/usr/obj/usr/src/sys/VPN  amd64
>Description:
Hello!

I have about 8000 ips in network. Each ip must be shaped to no more then 2Mbit/s. My configuration is:

ipfw pipe 22 config bw 2Mbit/s mask dst-ip 0xffffffff buckets 8192

So, when the net.inet.ip.dummynet.hash_size: 64

[root at vpn ~]# ipfw pipe 22 list
00022:   2.000 Mbit/s    0 ms burst 0 
q131094  50 sl. 0 flows (1 buckets) sched 65558 weight 0 lmax 0 pri 0 droptail
 sched 65558 type FIFO flags 0x1 1024 buckets 4 active

When:
net.inet.ip.dummynet.hash_size: 8192
ipfw pipe 22 config bw 2Mbit/s mask dst-ip 0xffffffff buckets 8192

[root at vpn ~]# ipfw pipe 22 list
00022:   2.000 Mbit/s    0 ms burst 0 
q131094  50 sl. 0 flows (1 buckets) sched 65558 weight 0 lmax 0 pri 0 droptail
 sched 65558 type FIFO flags 0x1 1024 buckets 4 active

When:
net.inet.ip.dummynet.hash_size: 8192
ipfw pipe 22 config bw 2Mbit/s mask dst-ip 0xffffffff
NOTE: I have not use "buckets" parameter

[root at vpn ~]# ipfw pipe 22 list
00022:   2.000 Mbit/s    0 ms burst 0 
q131094  50 sl. 0 flows (1 buckets) sched 65558 weight 0 lmax 0 pri 0 droptail
 sched 65558 type FIFO flags 0x1 8192 buckets 4 active



>How-To-Repeat:
Please see full description
>Fix:
Do not use "buckets" parameter and set appropriate sysctl


>Release-Note:
>Audit-Trail:
>Unformatted: