Subject: Big NMBCLUSTERS on a busy Firewall
To: None <port-i386@netbsd.org>
From: Christoph Kaegi <kgc@zhwin.ch>
List: port-i386
Date: 09/19/2001 07:41:42
Hi

I installed a NetBSD 1.5.1 System to take the function
of our SUN Firewalls which have strange problems.

Even though I bumped up NMBCLUSTERS to 32768, I still get:

--------------------------------- 8< --------------------------------
Sep 19 05:14:58 notfw /netbsd: WARNING: mclpool limit reached; increase NMBCLUSTERS
Sep 19 05:30:07 notfw last message repeated 3 times
Sep 19 05:35:12 notfw /netbsd: WARNING: mclpool limit reached; increase NMBCLUSTERS
Sep 19 05:50:11 notfw last message repeated 3 times
Sep 19 06:00:09 notfw last message repeated 2 times
Sep 19 06:05:13 notfw /netbsd: WARNING: mclpool limit reached; increase NMBCLUSTERS
Sep 19 06:20:09 notfw last message repeated 3 times
Sep 19 06:25:03 notfw /netbsd: WARNING: mclpool limit reached; increase NMBCLUSTERS
Sep 19 06:40:10 notfw last message repeated 3 times
Sep 19 06:45:14 notfw /netbsd: WARNING: mclpool limit reached; increase NMBCLUSTERS
Sep 19 07:00:09 notfw last message repeated 3 times
Sep 19 07:10:14 notfw last message repeated 2 times
Sep 19 07:15:13 notfw /netbsd: WARNING: mclpool limit reached; increase NMBCLUSTERS
Sep 19 07:30:09 notfw last message repeated 3 times

--------------------------------- 8< --------------------------------

Now the question: Is it save, to push NMBCLUSTERS even higher?
Is there any upper limit?
Or should I just increase them, until it doesnt complain anymore?

By the way, the machine seems mostly idle. ipfstat -s says:

--------------------------------- 8< --------------------------------
IP states added:
        28602140 TCP
        85228 UDP
        31663 ICMP
        973248185 hits
        37733768 misses
        1632485 maximum
        0 no memory
        2392 bkts in use
        3096 active
        116129 expired
        28599806 closed
--------------------------------- 8< --------------------------------

Thanks in advance for any hints

Chris

-- 
----------------------------------------------------------------------
Christoph Kaegi                                           kgc@zhwin.ch
----------------------------------------------------------------------