Hi,

I'd like to ask if it's normal for pfsync bulk transfer to take 5-15
minutes to end for 60k states.

pfsync is on a dedicated gigabit interface on both firewalls.

May  4 17:59:35 fw1 /bsd: carp: pfsync0 demoted group carp by 1 to 131
(pfsync bulk start)
May  4 17:59:35 fw1 /bsd: carp: pfsync0 demoted group pfsync by 1 to 1
(pfsync bulk start)
May  4 18:13:47 fw1 /bsd: carp: pfsync0 demoted group carp by -1 to 0
(pfsync bulk done)
May  4 18:13:47 fw1 /bsd: carp: pfsync0 demoted group pfsync by -1 to 0
(pfsync bulk done)

Stats on this interface show 967 pkts/sec    1421128 bytes/sec
Iperf  gives me 850Mbps from fw2 to fw1

fw1 is -current, fw2 is 4.9 -stable (kudos for another excellent release!)

regards,

Giannis

[demime 1.01d removed an attachment of type application/pkcs7-signature which 
had a name of smime.p7s]

Reply via email to