Re: lots of states in pf

[Cedric Berger <cedric@berger.to>]

Tony Sarendal wrote:

>Is it possible to configure an pf to handle 1M states ?
>
>I've been fighting 200kpps DDOS attacks this week and I'm looking for
>tools to help me protect our customers.
>
>/Tony
>
I think it depends with which architecture you wanna do that.
The only limitation you've is related to available kernel memory.
If I understand correctly, i386 cannot reliably handle more then
64M of kernel memory.
Someone else would know if sparc64, powerPC or upcoming amd64
for example handle more kernel memory.
Cedric