[Bug 294541] Sporadic "cannot allocate memory" from pf

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294541

--- Comment #1 from [email protected] ---
Some more information.

# vmstat -z | grep pf
pf mtags:               184,      0,       0,       0,       1,   0,   0,   0
pf tags:                104,      0,       0,       0,       0,   0,   0,   0
pf states:              384, 100000,      49,     191,  206963,   0,   0,   0
pf state keys:           88,      0,      49,     365,  413926,   0,   0,   0
pf source nodes:        152,  10000,       0,       0,       0,   0,   0,   0
pf UDP mappings:        104,      0,       0,       0,       0,   0,   0,   0
pf anchors:            1664,2147483647,       8,      13,       8,   0,   0,  
0
pf Ethernet anchors:   1240,2147483647,       0,       0,      28,   0,   0,  
0
pf table entry counters: 64,      0,       0,       0,       9,   0,   0,   0
pf table entries:       160,7500000,  755124,  215026,151724100,  13,   0,   0
pf frags:               232,      0,       0,       0,       0,   0,   0,   0
pf fragment node:        72,      0,       0,       0,       0,   0,   0,   0
pf frag entries:         40,   5000,       0,       0,       0,   0,   0,   0
pf state scrubs:         40,      0,       0,       0,       0,   0,   0,   0


# sysctl -a | grep net.pf
<118>Consider increasing net.pf.request_maxcount./usr/local/etc/pf.conf:28:
cannot define table ddos: too many elements.
<118>Consider increasing net.pf.request_maxcount.
net.pf.default_to_drop: 0
net.pf.filter_local: 0
net.pf.rule_tag_hashsize: 128
net.pf.request_maxcount: 10000000 #(tried to increase even more)
net.pf.udpendpoint_hashsize: 32768
net.pf.source_nodes_hashsize: 32768
net.pf.states_hashsize: 131072

# wc -l /usr/local/etc/pf.ddos.list
755155 /usr/local/etc/pf.ddos.list

-- 
You are receiving this mail because:
You are the assignee for the bug.