Re: ipfilter tuning

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
Steve Clark wrote:
| Hi Darren,
|
| Do you have any recommendations on how to size the various
| tables in ipfilter.

Start with how many concurrent connections you expect there to be.
10, 1000, 10000, 250000, 4000000...?

If you're going to support 5,000 logged in users to a web site, each one 
of those is going to need 'n' connections to the web server, so maybe 
you end up at 50,000 concurrent connections.

Web connections are normally short lived, but they still need to time 
out properly.

So 50,000 concurrent sessions multiplied by 2*TCP_MSL (240) becomes a 
table size of no less than 1,200,000.

Darren

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
 
iEYEARECAAYFAkr8WpYACgkQP7JIXtvLbFVHCQCfQcsNs826y5DAMsZa6udrSgo8
DO4An05sCAaG0peLYvcpxjNpiTBqaHVC
=jCeS
-----END PGP SIGNATURE-----