pf under load....

["arlen fletcher" <arlen.fletcher@att.net>]

Just installed OBSD 3.0 RELEASE (and pf) on a client's firewall last
night...  They have a 100mb pipe to the 'Net, and they told me after I was
finished that they average around 100,000 hits a day on their web servers.
Their site is pretty graphics-intensive (no, it's not a porn site...
believe it or not it's a real-estate site!) and they're not counting all the
hits they get on additional sites they host.  The machine is an 800MHz Intel
box with 512MB of RAM and a single D-Link 570T quad-ethernet NIC.  This box
was running OBSD 2.9 RELEASE with ipf, and even though we had bumped the
size of the state table up a half-dozen times, it would still fill up every
3 hours and would have to be flushed.  Should be interesting to see how this
new config handles the load!


The Conservative Slash,  / , leans to the right.
The Liberal Slash,   \, leans to the left.

-Arlen Fletcher