pfsync errors

Max Laier max at love2party.net
Thu Sep 6 14:04:32 PDT 2007


On Thursday 06 September 2007, Bill Marquette wrote:
> On 9/5/07, Max Laier <max at love2party.net> wrote:
> > Another way to go is setting the queuelength for the internal
> > processing queue to something insanely high (1000+).  This will most
> > likely work around the problem at the cost of burning (mbuf) memory.
>
> Assuming mbuf memory is essentially free that's certainly not a
> problem for me.  Is this the max ifqlen patch you had me try last
> week?  If so, what's a reasonably (relative to insanely high :))
> number to set that multiplier to?  2 times queue length "helped".  I
> don't want to set it so high that the box panics or something silly :)
>  Or for that matter, stops forwarding traffic while processing.  We'll
> give these patches a try in our lab shortly.  We just started getting
> the Smartbits online to try and duplicate the errors (straight up udp
> testing can't replicate it).

Try 1000 (or 20 * maxifqlen iirc).

-- 
/"\  Best regards,                      | mlaier at freebsd.org
\ /  Max Laier                          | ICQ #67774661
 X   http://pf4freebsd.love2party.net/  | mlaier at EFnet
/ \  ASCII Ribbon Campaign              | Against HTML Mail and News
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: This is a digitally signed message part.
Url : http://lists.freebsd.org/pipermail/freebsd-pf/attachments/20070906/a09f73cd/attachment.pgp


More information about the freebsd-pf mailing list