[Bug 260406] pfctl: Cannot allocate memory (after a time)

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=260406

            Bug ID: 260406
           Summary: pfctl: Cannot allocate memory (after a time)
           Product: Base System
           Version: CURRENT
          Hardware: arm64
               URL: https://lists.freebsd.org/archives/freebsd-pf/2021-Dec
                    ember/000163.html
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: bin
          Assignee: bugs@FreeBSD.org
          Reporter: tech-lists@zyxst.net

Hi,

A reboot solves this problem temporarily.

Please see:
https://lists.freebsd.org/archives/freebsd-pf/2021-December/000163.html
https://forums.freebsd.org/threads/cannot-define-table-cannot-allocate-memory-since-upgrade-to-13-0.80822/

doas -u _pfbadhost pf-badhost -O freebsd
Password:

pf-badhost 8462 - - Using experimental "aggy" aggregator...

pfctl: Cannot allocate memory.

pf-badhost 8516 - - ERROR: '/etc/pf-badhost.txt' contains invalid data!
Reverting changes and bailing out...

this happens no matter how much memory is given to pf

kern.maxdsiz=4294967296

State Table                          Total             Rate
  current entries                       20               
  searches                         5762821         4577.3/s
  inserts                            42916           34.1/s
  removals                           42896           34.1/s
Counters
  match                              71097           56.5/s
  bad-offset                             0            0.0/s
  fragment                               0            0.0/s
  short                                  0            0.0/s
  normalize                              0            0.0/s
  memory                                 0            0.0/s
  bad-timestamp                          0            0.0/s
  congestion                             0            0.0/s
  ip-option                              0            0.0/s
  proto-cksum                            0            0.0/s
  state-mismatch                         0            0.0/s
  state-insert                           0            0.0/s
  state-limit                            0            0.0/s
  src-limit                              0            0.0/s
  synproxy                               0            0.0/s
  map-failed                             0            0.0/s

LABEL COUNTERS:

TIMEOUTS:
tcp.first                    30s
tcp.opening                   5s
tcp.established           18000s
tcp.closing                  60s
tcp.finwait                  30s
tcp.closed                   30s
tcp.tsdiff                   10s
udp.first                    60s
udp.single                   30s
udp.multiple                 60s
icmp.first                   20s
icmp.error                   10s
other.first                  60s
other.single                 30s
other.multiple               60s
frag                         30s
interval                     10s
adaptive.start            60000 states
adaptive.end             120000 states
src.track                     0s

LIMITS:
states        hard limit   100000
src-nodes     hard limit    10000
frags         hard limit     5000
table-entries hard limit 25400000

-- 
You are receiving this mail because:
You are the assignee for the bug.