On Sun, 2005-10-30 at 15:31 -0400, Scott Ullrich wrote: > How many users have 50,000 states? I doubt very many!
Yet.... I got to this point just running about 500 requests/sec in apache benchmark. No keepalive. Once you get more of pfsense installations in data centers I guess it will be quite typical. Why do I think it is especially attractive ? Well because for home use you can buy firewall pretty cheap. The same applies for small business usage - there are solutions going for below 500$ costing just a bit more than decent hardware for pfsense would. If you look at higher end firewalls, ie for collocation purposes - you instantly get to be charged a lot of money. I've looked at PIX, Watchguard, SonicWall, Netscreen and few others before going to pfsense. I spoke to the people using them and found it is not exactly problem less and not paramount in stability. You also forced to get support/update contract - you will not even get bug fixes without it, which all gets it pretty expensive. Finally some people who had some peoblems with firewall which could not be resolved by vendor ended up selling it on Ebay. With pfSense running on commodity hardware it is not the case - if I'm not happy with it for some reason I can try different firewall solution or simply put OpenBSD or any other OS on it and set it up as firewall. I love flexibility and hate vendor lockin > > Scott > > On 10/30/05, Peter Zaitsev <[EMAIL PROTECTED]> wrote: > > On Sun, 2005-10-30 at 14:29 -0400, Scott Ullrich wrote: > > > With that amount of states it does not surprise me. You're most > > > likely better of doing a pfctl -ss and using grep to find what your > > > looking for. > > > > Yes... It is however not total excuse for web page simply not loading. > > It would look like a bug to normal user :) > > > > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
