[Bug 263626] PF is unable to load more than 200000 entries

From: <bugzilla-noreply_at_freebsd.org>
Date: Thu, 28 Apr 2022 10:02:11 UTC

            Bug ID: 263626
           Summary: PF is unable to load more than 200000 entries
           Product: Base System
           Version: 13.0-RELEASE
          Hardware: arm64
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: kern
          Assignee: bugs@FreeBSD.org
          Reporter: dmilith@me.com

To make a long story short:

I'm trying to load more than 200k entries to my <blocked> list:

# Blocked list
table <blocked> persist file "/etc/spammers" file "/etc/blocklist"
block in quick from <blocked>
block out quick to <blocked>

According to the pf documentation, I should be able to set:

`set limit table-entries 300000` in /etc/pf.conf and do `pfctl -Tl -f
/etc/pf.conf` to reload it but this doesn't work. The limit is still 200k

I've also tried bumping the `net.pf.request_maxcount` sysctl to some huge
value, but that didn't help.

My testing procedure:

In my experiment, I've generated 27000000+ addresses in my source text file,
which I split by a certain amount and store one fragment as /etc/blocklist. No
matter what I do I'm unable to load more than 200k lines/ IP entries to the pf.

You are receiving this mail because:
You are the assignee for the bug.