d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Bump default dynamic limit to 16k entries.

Browse Source 
Print better log message when limit is hit.

PR:		193300
Submitted by:	me at nileshgr.com
This commit is contained in:
Alexander V. Chernikov 2014-10-24 13:57:15 +00:00
parent a663aa4ce8
commit 552eb491ab
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
sys/netpfil/ipfw/ip_fw_dynamic.c
View File

@ -592,8 +592,9 @@ add_dyn_rule(struct ipfw_flow_id *id, int i, u_int8_t dyn_type, struct ip_fw *ru
if (r == NULL) {
if (last_log != time_uptime) {
last_log = time_uptime;
log(LOG_DEBUG, "ipfw: %s: Cannot allocate rule\n",
__func__);
log(LOG_DEBUG,
"ipfw: Cannot allocate dynamic state, "
"consider increasing net.inet.ip.fw.dyn_max\n");
}
return NULL;
}
@ -1385,7 +1386,7 @@ ipfw_dyn_init(struct ip_fw_chain *chain)
V_dyn_keepalive = 1; /* do send keepalives */
V_dyn_keepalive_last = time_uptime;
V_dyn_max = 4096; /* max # of dynamic rules */
V_dyn_max = 16384; /* max # of dynamic rules */
V_ipfw_dyn_rule_zone = uma_zcreate("IPFW dynamic rule",
sizeof(ipfw_dyn_rule), NULL, NULL, NULL, NULL,