[Bug 240532] pf stops purging IPv6 FIN_WAIT_2 states?

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=240532

            Bug ID: 240532
           Summary: pf stops purging IPv6 FIN_WAIT_2 states?
           Product: Base System
           Version: 11.2-RELEASE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: kern
          Assignee: bugs at FreeBSD.org
          Reporter: pen at lysator.liu.se

Created attachment 207418
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=207418&action=edit
pf.conf

I just noticed that our production servers seems to be accumulating FIN_WAIT_2
state entries in PF (atleast IPv6 ones).

# pfctl -ss | egrep FIN_WAIT_2 | egrep -v 2001 | wc -l
     386
# pfctl -ss | egrep FIN_WAIT_2 | egrep  2001 | wc -l
   23141

Using workaround from bug 222126 seems to wake up the "pf purge" kernel thread
again 
(atleast for a while):

# echo "set timeout interval 5" | pfctl -mf -

FreeBSD 11.2-RELEASE-p10
Dell PowerEdge R730xd
256GB RAM
(NFS & SMB fileservers)

-- 
You are receiving this mail because:
You are the assignee for the bug.