Kapetanakis Giannis wrote: > Hi, > > I'd like to ask if it's normal for pfsync bulk transfer to take 5-15 > minutes to end for 60k states. > > pfsync is on a dedicated gigabit interface on both firewalls.
I've seen this too. On a pair of 4.9-release firewalls. If I reboot the master, it can take up to 15 minutes for it (which is the preferred master) to become master again. Another thing I found was, if the backup goes down.. the master goes a bit crazy and was livelocking on me. I don't know if that was down to pfsync being strange or something else. I'd test it again, but these are production machines and I have no way of simulating 50-60k states being transferred between machines, otherwise I'd set up two test machines with that. Tom