<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[What limits the number of states that pfSense can handle?]]></title><description><![CDATA[<p dir="auto">I'm seeing that all of my pfSense boxes have a fixed number of states that it can handle, which is 10,000.</p>
<p dir="auto">What sets this number?  Is it an arbitrary limit?  Kernel limitation?  Driver limitation?</p>
<p dir="auto">I have an environment I'm looking to put 2 or more pfSense firewalls into place to share the load, and I think they have the horsepower to handle far more than a WRAP box can, but they are both limited to this 10,000 number.  What establishes this limit?</p>
]]></description><link>https://forum.netgate.com/topic/927/what-limits-the-number-of-states-that-pfsense-can-handle</link><generator>RSS for Node</generator><lastBuildDate>Tue, 21 Apr 2026 04:20:53 GMT</lastBuildDate><atom:link href="https://forum.netgate.com/topic/927.rss" rel="self" type="application/rss+xml"/><pubDate>Thu, 06 Apr 2006 20:59:47 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to What limits the number of states that pfSense can handle? on Sun, 09 Apr 2006 15:48:17 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/numbski">@<bdi>Numbski</bdi></a>:</p>
<blockquote>
<p dir="auto">I'm seeing that all of my pfSense boxes have a fixed number of states that it can handle, which is 10,000.</p>
<p dir="auto">What sets this number?  Is it an arbitrary limit?  Kernel limitation?  Driver limitation?</p>
<p dir="auto">I have an environment I'm looking to put 2 or more pfSense firewalls into place to share the load, and I think they have the horsepower to handle far more than a WRAP box can, but they are both limited to this 10,000 number.  What establishes this limit?</p>
</blockquote>
<p dir="auto">The 10K states is an arbitrary default set by pf.  Each state eats approx. 1K of RAM so 10K states could potentially eat 10MBytes - the pf (note, I'm not talking about pfsense) developers chose 10K due to a desire to have pf work out of the box on low memory platforms.  We've chosen to keep that limit, however, as hoba pointed out, this is changable in System-&gt;Advanced.  At some point, I may choose to make this a dynamic dynamic default based on system memory, but 10K is actually a halfway decent default that most users won't exceed.</p>
<p dir="auto">–Bill</p>
]]></description><link>https://forum.netgate.com/post/135898</link><guid isPermaLink="true">https://forum.netgate.com/post/135898</guid><dc:creator><![CDATA[billm]]></dc:creator><pubDate>Sun, 09 Apr 2006 15:48:17 GMT</pubDate></item><item><title><![CDATA[Reply to What limits the number of states that pfSense can handle? on Thu, 06 Apr 2006 21:09:29 GMT]]></title><description><![CDATA[<p dir="auto">It's adjustable: system&gt;advanced, maximum states.<br />
Btw, this has been answered before: http://forum.pfsense.org/index.php?topic=35.0</p>
]]></description><link>https://forum.netgate.com/post/135848</link><guid isPermaLink="true">https://forum.netgate.com/post/135848</guid><dc:creator><![CDATA[hoba]]></dc:creator><pubDate>Thu, 06 Apr 2006 21:09:29 GMT</pubDate></item></channel></rss>