Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 15 May 2008 12:09:39 -0400
From:      Vivek Khera <vivek@khera.org>
To:        FreeBSD Stable <freebsd-stable@freebsd.org>
Cc:        freebsd-ipfw@freebsd.org
Subject:   Re: how much memory does increasing max rules for IPFW take up?
Message-ID:  <6ADAB997-FAA4-43B8-AB57-3CC4A04F3700@khera.org>
In-Reply-To: <482C0A89.104@FreeBSD.org>
References:  <04EA1C34-AB7D-4A85-8A91-DED03E987706@khera.org> <482C07DE.3090504@yandex.ru> <482C0A89.104@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help

On May 15, 2008, at 6:03 AM, Bruce M. Simpson wrote:

> Having said that the default tunable of 256 state entries is  
> probably quite low for use cases other than "home/small office NAT  
> gateway".

The deafult on my systems seems to be 4096.  My steady state on a  
pretty popular web server is about 400, on a busy inbound mail server,  
around 800 states.  I need to account for peaks much higher, though.   
Luckily most of my connections are short-lived.

Thanks for the answers!




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6ADAB997-FAA4-43B8-AB57-3CC4A04F3700>