Also do not forget to rebuild pfctl so that statistics are shown correctly.
On Sat, Mar 9, 2013 at 1:14 PM, Ermal Luçi <e...@freebsd.org> wrote: > > > > On Fri, Mar 8, 2013 at 9:51 PM, Kajetan Staszkiewicz < > veg...@tuxpowered.net> wrote: > >> Dnia piątek, 8 marca 2013 o 21:11:43 Ermal Luçi napisał(a): >> > Is this FreeBSD 9.x or HEAD? >> >> I found the problem and developed the patch on 9.1. >> >> Can you please test this more 'beautiful' patch. > Its similar to yours but also delays src state removal to the proper purge > thread. > > Though the src node removal option through pfctl -K does a lot of job to > cleanup things > Still need to undertand why it takes so much time for you to loop through > 500K states. > The purge thread does that every tick by partitioning it to a few per time > slot but still minutes is way loong. > > Can you please try to give a top -SH view of the time when this happens > and a pfctl -vvsa output? > > > >> -- >> | pozdrawiam / greetings | powered by Debian, CentOS and FreeBSD | >> | Kajetan Staszkiewicz | jabber,email: vegeta()tuxpowered net | >> | Vegeta | www: http://vegeta.tuxpowered.net | >> `------------------------^---------------------------------------' >> > > > > -- > Ermal > -- Ermal _______________________________________________ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"
