State purging too slow
-
I have hi-traffic firewall (~10Mbps in, 140Mbps+ out)
and found dropped packets on LAN interface each 10 seconds:# netstat -I em1 -w 1 packets errs bytes packets errs bytes colls 7851 0 1404606 10690 0 13299056 0 7448 0 1327158 10287 0 12872033 0 7146 0 1223270 10142 0 12829923 0 7045 0 1263062 9781 0 12460681 0 7038 0 1267264 9860 0 12341913 0 7553 0 1436933 10367 0 12886403 0 7144 0 1229468 9741 0 12264878 0 7742 35 1362471 10464 0 13174984 0 6797 0 1229598 9258 0 11531587 0 7260 0 1224535 9859 0 12266987 0 7728 0 1259501 10666 0 13397924 0 7714 0 1231285 10997 0 13859088 0 7680 0 1277679 10581 0 13408967 0 7251 0 1228404 10101 0 12685574 0 7129 0 1240879 9918 0 12544214 0 8021 0 1332980 11386 0 14426473 0 7080 0 1229813 9946 0 12501376 0 7278 126 1231365 9571 0 11929997 0 6499 0 1209231 8533 0 10221935 0 7140 0 1256594 9808 0 12123881 0 7589 0 1279488 10515 0 13053043 0
I discovered that pf run state purging each 10 seonds. Is there any way to change this value?
Which value should be reasonable if I have about 150 000 states?
Please suggest! -
Sounds like http://forum.pfsense.org/index.php/topic,5788.new.html#new
Are you not the same person?
-
Sorry Scott,
You're right. Vladimir is member of our team who is also desperately trying to find solution for this problem.
I guess he had to read all my posts before posting his.
Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.