I am trying to approximate the maximum number of open TCP connections
that an OpenBSD firewall can support at any given time.
The scenario here is a firewall with 2 interfaces, a bunch of Web
servers behind it on private IP addresses, a fairly simple set of rules
(NAT each server on a public
From previous discussions (search the archives) this has nothing to do
with userland memory available but to kernel data structures.
Also read pf.conf(5) man page:
OPTIONS
pf(4) may be tuned for various situations using the set command.
interval Interval between purging
2 matches
Mail list logo
