Subject: Re: Big NMBCLUSTERS on a busy Firewall
To: None <port-i386@netbsd.org>
From: Manuel Bouyer <bouyer@antioche.eu.org>
List: port-i386
Date: 09/19/2001 23:03:41
On Wed, Sep 19, 2001 at 07:41:42AM +0200, Christoph Kaegi wrote:
> 
> Hi
> 
> I installed a NetBSD 1.5.1 System to take the function
> of our SUN Firewalls which have strange problems.
> 
> Even though I bumped up NMBCLUSTERS to 32768, I still get:
> 
> --------------------------------- 8< --------------------------------
> Sep 19 05:14:58 notfw /netbsd: WARNING: mclpool limit reached; increase NMBCLUSTERS
> Sep 19 05:30:07 notfw last message repeated 3 times
> Sep 19 05:35:12 notfw /netbsd: WARNING: mclpool limit reached; increase NMBCLUSTERS
> Sep 19 05:50:11 notfw last message repeated 3 times
> Sep 19 06:00:09 notfw last message repeated 2 times
> Sep 19 06:05:13 notfw /netbsd: WARNING: mclpool limit reached; increase NMBCLUSTERS
> Sep 19 06:20:09 notfw last message repeated 3 times
> Sep 19 06:25:03 notfw /netbsd: WARNING: mclpool limit reached; increase NMBCLUSTERS
> Sep 19 06:40:10 notfw last message repeated 3 times
> Sep 19 06:45:14 notfw /netbsd: WARNING: mclpool limit reached; increase NMBCLUSTERS
> Sep 19 07:00:09 notfw last message repeated 3 times
> Sep 19 07:10:14 notfw last message repeated 2 times
> Sep 19 07:15:13 notfw /netbsd: WARNING: mclpool limit reached; increase NMBCLUSTERS
> Sep 19 07:30:09 notfw last message repeated 3 times
> 
> --------------------------------- 8< --------------------------------
> 
> Now the question: Is it save, to push NMBCLUSTERS even higher?
> Is there any upper limit?
> Or should I just increase them, until it doesnt complain anymore?
> 
> By the way, the machine seems mostly idle. ipfstat -s says:
> 
> --------------------------------- 8< --------------------------------
> IP states added:
>         28602140 TCP
>         85228 UDP
>         31663 ICMP
>         973248185 hits
>         37733768 misses
>         1632485 maximum
>         0 no memory
>         2392 bkts in use
>         3096 active
>         116129 expired
>         28599806 closed
> --------------------------------- 8< --------------------------------
> 
> Thanks in advance for any hints

And what does 'netstat -m' and 'vmstat -m' say ?

--
Manuel Bouyer <bouyer@antioche.eu.org>
--