Re: pf match counter peak causes firewall to lag

2015-11-21 Thread Martin Hlavatý
On Sat, Nov 21, 2015 at 2:43 PM, Daniel Melameth wrote: > On Sat, Nov 21, 2015 at 6:21 AM, Martin Hlavatý wrote: >> I have issues with firewall lags while there is peak in match >> rule counter in pf. Normally it has match ratio of about >> 1500/sec, but

pf match counter peak causes firewall to lag

2015-11-21 Thread Martin Hlavatý
Hello, I have issues with firewall lags while there is peak in match rule counter in pf. Normally it has match ratio of about 1500/sec, but several times a day it jumps to somewhere around 6k/sec and firewall lags, some traffic gets dropped. This takes a few seconds. Lag causes system to delay

Re: pf match counter peak causes firewall to lag

2015-11-21 Thread Daniel Melameth
On Sat, Nov 21, 2015 at 6:21 AM, Martin Hlavatý wrote: > I have issues with firewall lags while there is peak in match > rule counter in pf. Normally it has match ratio of about > 1500/sec, but several times a day it jumps to somewhere > around 6k/sec and firewall lags, some