On Wed, 2005-08-31 at 12:05:48 -0300, Diego Augusto Dalmolin proclaimed... > Ok but... don4t you the default values like kern.somaxconn=128 > are too small for an OBSD router/nat with 2 x Gig lans + 2 x 4Mbps > internet conections
Maybe, but don't expect support. That said, here's what we use on an Internet tap for a site with 1200Mbps aggregate connectivity. net.inet.tcp.recvspace=65535 net.inet.tcp.sendspace=65535 net.inet.ip.maxqueue=2048 kern.somaxconn=2048 net.bpf.bufsize=2097152 net.bpf.maxbufsize=4194304 Note that we've tuned net/bpf.h after testing for the past couple years. However, when/if we would ever need support, we would immediately revert back to GENERIC without the above sysctl's tuned so high. People need to understand that GENERIC doesn't work for everyone, but this isn't Linux. If you're asking how to tune it, the chances are that you do not know enough to tune it. Let GENERIC work for you (it worked fine for us just until quite recently when we added some more bpf hogging applications that were ultra-paranoid about packet loss, etc).