Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 15 May 2008 13:52:30 +0400
From:      "Andrey V. Elsukov" <bu7cher@yandex.ru>
To:        Vivek Khera <vivek@khera.org>
Cc:        freebsd-ipfw@freebsd.org, FreeBSD Stable <freebsd-stable@freebsd.org>
Subject:   Re: how much memory does increasing max rules for IPFW take up?
Message-ID:  <482C07DE.3090504@yandex.ru>
In-Reply-To: <04EA1C34-AB7D-4A85-8A91-DED03E987706@khera.org>
References:  <04EA1C34-AB7D-4A85-8A91-DED03E987706@khera.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Vivek Khera wrote:
> I had a box run out of dynamic state space yesterday.  I found I can 
> increase the number of dynamic rules by increasing the sysctl parameter 
> net.inet.ip.fw.dyn_max.  I can't find, however, how this affects memory 
> usage on the system.  Is it dyanamically allocated and de-allocated, or 
> is it a static memory buffer?

Each dynamic rule allocated dynamically. Be careful, too many dynamic 
rules will work very slow.

-- 
WBR, Andrey V. Elsukov



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?482C07DE.3090504>