git: 512f136f39c4 - main - pf.conf.5: reflect the new state limit
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Mon, 30 Jun 2025 09:54:34 UTC
The branch main has been updated by kp:
URL: https://cgit.FreeBSD.org/src/commit/?id=512f136f39c4423121cb72766c87acca5483276f
commit 512f136f39c4423121cb72766c87acca5483276f
Author: Kristof Provost <kp@FreeBSD.org>
AuthorDate: 2025-06-26 13:38:57 +0000
Commit: Kristof Provost <kp@FreeBSD.org>
CommitDate: 2025-06-30 07:53:26 +0000
pf.conf.5: reflect the new state limit
where we were showing "set limit states 10000" make that 100k as well,
and adjust adaptive.start/end as well (just like in the code)
Obtained from: OpenBSD, henning <henning@openbsd.org>, a47b29f6e6
Sponsored by: Rubicon Communications, LLC ("Netgate")
---
share/man/man5/pf.conf.5 | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5
index 5d802f81984f..3c9706063a65 100644
--- a/share/man/man5/pf.conf.5
+++ b/share/man/man5/pf.conf.5
@@ -27,7 +27,7 @@
.\" ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
.\" POSSIBILITY OF SUCH DAMAGE.
.\"
-.Dd June 17, 2025
+.Dd June 26, 2025
.Dt PF.CONF 5
.Os
.Sh NAME
@@ -361,8 +361,8 @@ For example:
.Bd -literal -offset indent
set timeout tcp.first 120
set timeout tcp.established 86400
-set timeout { adaptive.start 6000, adaptive.end 12000 }
-set limit states 10000
+set timeout { adaptive.start 60000, adaptive.end 120000 }
+set limit states 100000
.Ed
.Pp
With 9000 state table entries, the timeout values are scaled to 50%