Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    State purging too slow

    Firewalling
    3
    3
    1.6k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      astellar
      last edited by

      I have hi-traffic firewall (~10Mbps in, 140Mbps+ out)
      and found dropped packets on LAN interface each 10 seconds:

      
      # netstat -I em1 -w 1
         packets  errs      bytes    packets  errs      bytes colls
            7851     0    1404606      10690     0   13299056     0
            7448     0    1327158      10287     0   12872033     0
            7146     0    1223270      10142     0   12829923     0
            7045     0    1263062       9781     0   12460681     0
            7038     0    1267264       9860     0   12341913     0
            7553     0    1436933      10367     0   12886403     0
            7144     0    1229468       9741     0   12264878     0
            7742    35    1362471      10464     0   13174984     0
            6797     0    1229598       9258     0   11531587     0
            7260     0    1224535       9859     0   12266987     0
            7728     0    1259501      10666     0   13397924     0
            7714     0    1231285      10997     0   13859088     0
            7680     0    1277679      10581     0   13408967     0
            7251     0    1228404      10101     0   12685574     0
            7129     0    1240879       9918     0   12544214     0
            8021     0    1332980      11386     0   14426473     0
            7080     0    1229813       9946     0   12501376     0
            7278   126    1231365       9571     0   11929997     0
            6499     0    1209231       8533     0   10221935     0
            7140     0    1256594       9808     0   12123881     0
            7589     0    1279488      10515     0   13053043     0
      

      I discovered that pf run state purging each 10 seonds. Is there any way to change this value?
      Which value should be reasonable if I have about 150 000 states?
      Please suggest!

      1 Reply Last reply Reply Quote 0
      • S
        sullrich
        last edited by

        Sounds like http://forum.pfsense.org/index.php/topic,5788.new.html#new

        Are you not the same person?

        1 Reply Last reply Reply Quote 0
        • P
          PeterZ
          last edited by

          Sorry Scott,

          You're right. Vladimir is member of our team who is also desperately trying to find solution for this problem.

          I guess he had to read all my posts before posting his.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.