Kapetanakis Giannis wrote:
> Hi,
>
> I'd like to ask if it's normal for pfsync bulk transfer to take 5-15
> minutes to end for 60k states.
>
> pfsync is on a dedicated gigabit interface on both firewalls.

I've seen this too. On a pair of 4.9-release firewalls. If I reboot the
master, it can take up to 15 minutes for it (which is the preferred master)
to become master again.

Another thing I found was, if the backup goes down.. the master goes a bit
crazy and was livelocking on me. I don't know if that was down to pfsync
being strange or something else. I'd test it again, but these are 
production machines and I have no way of simulating 50-60k states being
transferred between machines, otherwise I'd set up two test machines with
that.

Tom

Reply via email to