[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
pf under load....
Just installed OBSD 3.0 RELEASE (and pf) on a client's firewall last
night... They have a 100mb pipe to the 'Net, and they told me after I was
finished that they average around 100,000 hits a day on their web servers.
Their site is pretty graphics-intensive (no, it's not a porn site...
believe it or not it's a real-estate site!) and they're not counting all the
hits they get on additional sites they host. The machine is an 800MHz Intel
box with 512MB of RAM and a single D-Link 570T quad-ethernet NIC. This box
was running OBSD 2.9 RELEASE with ipf, and even though we had bumped the
size of the state table up a half-dozen times, it would still fill up every
3 hours and would have to be flushed. Should be interesting to see how this
new config handles the load!
The Conservative Slash, / , leans to the right.
The Liberal Slash, \, leans to the left.