Thank you both Franco and Kristof.

I was not able to make pf work with big tables without workarounds of some kind.

Tuning net.pf.request_maxcount in sysctl.conf was not working because this kernel parameter was raised after pf started: so, after boot, I had pf not enabled (because table was too big and this lead to an error) but with kernel parameter set as I meant.

Best regards.

Nicola

Il 12/12/20 21:15, Kristof Provost ha scritto:
On 12 Dec 2020, at 15:07, Franco Fichtner wrote:
There's no reason for this to be a tunable. It's perfectly safe to
change this at runtime.

Well, RWTUN would have enabled both boot and runtime which is also
"perfectly safe".  :)

Good idea. Done in 368588.

I expect to be bothering people about an EN for the vnet/epair issue next week, I’ll see if I can include this in the bothering.

Best regards,
Kristof
_______________________________________________
freebsd-pf@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "freebsd-pf-unsubscr...@freebsd.org"
_______________________________________________
freebsd-pf@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "freebsd-pf-unsubscr...@freebsd.org"

Reply via email to