Date: Fri, 03 Aug 2001 00:27:17 +0200 From: Andre Oppermann <oppermann@telehouse.ch> To: Poul-Henning Kamp <phk@critter.freebsd.dk> Cc: freebsd-hackers@FreeBSD.ORG, freebsd-net@FreeBSD.ORG Subject: Re: 303,000 routes in kernel Message-ID: <3B69D3C5.3562B7C4@telehouse.ch> References: <93100.996790166@critter>
next in thread | previous in thread | raw e-mail | index | archive | help
Poul-Henning Kamp wrote: > > In message <3B69CE3F.1BCCB280@telehouse.ch>, Andre Oppermann writes: > > >The problem I've got now is that for every packet I get the kernel is > >making one host entry in the routing table. Because of the many UDP > >DNS requests from all over the world I've got 303'000 (yes, three- > >hundredthreethousand) entries in the kernel routing table which have > >not expired yet. So I'm getting error messages like this now: > > Hmm, I wasn't aware that we cloned routes for UDP packets, are you sure > that is what is causing the routes to exists ? (Just to mention the > obvious: it's not CodeRed probes ?) No, it's not code red probes. My apache log is only 3 Meg in size and has not been rotated in the past 2 month. So, yes, it looks like UDP packets are also generating cloned routes. > You can tweak the route behaviour with some sysctls: > > Notably: > net.inet.ip.rtexpire: 473 > net.inet.ip.rtminexpire: 10 > net.inet.ip.rtmaxcache: 128 Isn't this for fastforwarding? > There's probably also a detailed explanation what they do somewhere... Is there any knob to turn route cloning off? Would that hurt? -- Andre To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3B69D3C5.3562B7C4>