Hello,

I'm asking about the goal of the parameter maxupd of pfsync, ie when we
should change it ?

At work we have a lot of states (~1 200 000) with many changes and it
looks like we lose some states deletion across pfysnc. Does an
augmentation of maxupd could help ? 

the manual :
The pfsync interface will attempt to collapse multiple state updates
into a single packet where possible.  The maximum number of times a
single state can be updated before a pfsync packet will be sent out is
con- trolled by the maxupd parameter to ifconfig (see ifconfig(8) and
the example below for more details).  The sending out of a pfsync
packet will be delayed by a maximum of one second.

Thanks, regards.

_______________________________________________
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "[email protected]"

Reply via email to