[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: lots of states in pf
Tony Sarendal wrote:
>Is it possible to configure an pf to handle 1M states ?
>I've been fighting 200kpps DDOS attacks this week and I'm looking for
>tools to help me protect our customers.
I think it depends with which architecture you wanna do that.
The only limitation you've is related to available kernel memory.
If I understand correctly, i386 cannot reliably handle more then
64M of kernel memory.
Someone else would know if sparc64, powerPC or upcoming amd64
for example handle more kernel memory.