Please read the bulk of my message in the "Description:" section below...
>Submitter-Id: current-users
>Originator:Aaron Gifford
>Organization: N/A
>Confidential: no
>Synopsis: NEW IPFW FEATURE [PATCHES]: Dynamic rule expiration lifetime
>fine-grained control
>Severity: non-cr
Hello,
We've got into problems that I have no idea how to solve. Our webcluster consist
of one frontend server and several backend servers. FreeBSD 4.3-STABLE and
apache 1.3.20 are used everywhere. When a rate of requests from frontend to
backend server becomes too high (over 100 rps) backend ser
> > Even if it takes 0 ns to do a route lookup, a stock freebsd
> > system can't do more than 20K ~ 100K pkts/second due to many
> > bottlenecks. In a hardware accelrated router one can easily
> > do 10M route lookups *without* using an expensive & power
> > hungry fancy CAM. But they may be wo
> >I can only find a way to define a global SPD using setkey. Is it possible
> >to define an (IPv4) SPD on a per interface basis using KAME / FreeBSD4?
> >If not, are there any plans to add this in the future?
> >Is there any reason one wouldn't want to have this?
> no. do you want SPD per
On Tue, 3 Jul 2001, Ruslan Ermilov wrote:
> On Tue, Jul 03, 2001 at 04:54:29PM +0300, Iasen Kostoff wrote:
> >
> [...]
> > > You can't change host route to network route, or vise versa; destination
> > > is the Patricia's tree key, and it can't be changed. The only possible
> > > way is like
> > Here's a ping on my friend's machine (Mac ping, sorry for lack of precision):
> >
> > Packets out/in/bad/%loss = 64/64/0/0.0
> > Round Trip Time (ms) min/avg/max = 14/24/59
> >
> > My box should be fine cpu-wise, it's a Celeron/300, and isn't doing
> > anything else. The card PPPoE is runnin
