tech-net archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

NPF tuning



Hi,

It seems I cannot load a ruleset with more than 120 (128?) rules:
  npfctl: npfctl_config_send: Invalid argument

Is there a limit on rule count? How to raise?

In IPFilter and PF I also have to tune some other limits, eg. state
table size, max frag size, etc.

PF:

set limit states 120000
set limit frags 20000

IPFilter:

ipfilter_flags="-T state_max=30011,state_size=40009,nat_table_size=40009,nat_table_max=120000"

Isn't this necessary on NPF? Can it play well with ~80.000 states by
default?

Thanks,
--
Gergely EGERVARY



Home | Main Index | Thread Index | Old Index