From owner-freebsd-stable@FreeBSD.ORG  Fri Nov  7 16:30:19 2014
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id BBE7494D
 for <stable@freebsd.org>; Fri,  7 Nov 2014 16:30:19 +0000 (UTC)
Received: from constantine.ingresso.co.uk (constantine.ingresso.co.uk
 [IPv6:2a02:b90:3002:e550::3])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 85308C13
 for <stable@freebsd.org>; Fri,  7 Nov 2014 16:30:19 +0000 (UTC)
Received: from dilbert.london-internal.ingresso.co.uk ([10.64.50.6]
 helo=dilbert.ingresso.co.uk)
 by constantine.ingresso.co.uk with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
 (Exim 4.82 (FreeBSD)) (envelope-from <petefrench@ingresso.co.uk>)
 id 1XmmQR-000ONQ-8x; Fri, 07 Nov 2014 16:30:15 +0000
Received: from petefrench by dilbert.ingresso.co.uk with local (Exim 4.84
 (FreeBSD)) (envelope-from <petefrench@ingresso.co.uk>)
 id 1XmmQR-000ARo-6g; Fri, 07 Nov 2014 16:30:15 +0000
To: petefrench@ingresso.co.uk, petefrench@ingresso.co.uk, ronald-lists@klop.ws,
 stable@freebsd.org
Subject: Re: Advice on an odd networking problem
Message-Id: <E1XmmQR-000ARo-6g@dilbert.ingresso.co.uk>
From: Pete French <petefrench@ingresso.co.uk>
Date: Fri, 07 Nov 2014 16:30:15 +0000
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable/>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 07 Nov 2014 16:30:19 -0000

Just to finish this thread for anyone googling - we found the cause
of this, which was running out of states in pf on the firewalls. The
extra call on the local webserve was generating an extra call
for memcached, whcih was being load balanced back through the
same set of firewalls.

thanks for the advice, and appologies for the http/https typo ;)

-pete.