Hi Ryan,
We are seeing the issue again and I am writing a script to get the
"pfctl -vvsi" data at regular intervals. Can you please point me to
what values I should be looking out for?
Thanks
Parvinder Bhasin
On 12/3/10 11:32 AM, dabheeruz wrote:
Thanks Ryan! Unfortunately when this happened I was remote and could
not grab those stats. But what should I be looking for in term of
badness. Maybe I can quickly setup something to monitor for
particular stat. Really appreciate your input.
Thx.
On 12/3/10 12:41 AM, Ryan McBride wrote:
On Thu, Dec 02, 2010 at 11:22:08PM -0500, Godesi wrote:
1. Do I need pf for relayd when I am not doing redirects?
I don't think so, but this is easy for you to test...
2. How much states can i "really" have on a box that has 4 gig ram?
More than 100,000. I havn't tested lately (planning to do so soo), but I
would expect somewhere closer to 500,000.
Is it governed by how much mem is allocated to kernel?
Yes.
Can I change that?
Not directly. In fact, having too much RAM in your box will COST you
memory, as more kernel memory is used up tracking all your RAM. So
cutting your ram to 2 GB will probably improve the upper limit, though
it doesn't seem that that's the limit you are hitting.
What does 'pfctl -vvsi' show when this problem is happening?