Subject: Re: Realistic NMBCLUSTERS limit?
To: Tom Haapanen <tomh@metrics.com>
From: Andrew Gillham <gillhaa@ghost.whirlpool.com>
List: port-alpha
Date: 03/09/2000 11:31:14
Tom Haapanen writes:
[Charset iso-8859-1 unsupported, filtering to ASCII...]
> Our web server (164SX/533, 256 MB, NetBSD 1.4.1) got these early this
> morning and promptly fell off the network:
> 
> Mar  9 01:57:37 stratos /netbsd: WARNING: mclpool limit reached; increase
> NMBCLUSTERS 
> Mar  9 01:59:10 stratos /netbsd: WARNING: mclpool limit reached; increase
> NMBCLUSTERS
> 
> How do I determine what my current NMBCLUSTERS is actually set to?  How high
> should I set it to be safe?

On an i386 box (P133, 100 Mbps 'de') that was getting hammered with DNS,
I upped it to 16384 and it works fine now.

This makes a good "denial of service" attack IMHO.  Your server happily
runs along with 'NMBCLUSTERS=1024' for months, and suddenly you lose access
to it, have have to rebuild a kernel with 2048.  Oops, that isn't enough,
lost access again, try 4096, oops, 8192, oops, 16384.  Whew!  Damn thing
is "stable" again.

-Andrew
-- 
-----------------------------------------------------------------
Andrew Gillham                            | This space left blank
gillham@whirlpool.com                     | inadvertently.
I speak for myself, not for my employer.  | Contact the publisher.