-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Steve Clark wrote:
| Hi Darren,
|
| Do you have any recommendations on how to size the various
| tables in ipfilter.

Start with how many concurrent connections you expect there to be.
10, 1000, 10000, 250000, 4000000...?

If you're going to support 5,000 logged in users to a web site, each one of those is going to need 'n' connections to the web server, so maybe you end up at 50,000 concurrent connections.

Web connections are normally short lived, but they still need to time out properly.

So 50,000 concurrent sessions multiplied by 2*TCP_MSL (240) becomes a table size of no less than 1,200,000.

Darren

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkr8WpYACgkQP7JIXtvLbFVHCQCfQcsNs826y5DAMsZa6udrSgo8
DO4An05sCAaG0peLYvcpxjNpiTBqaHVC
=jCeS
-----END PGP SIGNATURE-----

Reply via email to