summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRob Gulewich <robert.gulewich@joyent.com>2013-03-15 09:41:26 -0700
committerRob Gulewich <robert.gulewich@joyent.com>2013-03-15 09:42:12 -0700
commitc3ef76c0cf172093d8a6fdf5130c152a1b6f4de6 (patch)
treebbf84bef08ec9b3abcaccd119de279f598a34ed8
parent76dc73ab0e2fe1d48db2409942b0831c14ff886d (diff)
downloadillumos-joyent-c3ef76c0cf172093d8a6fdf5130c152a1b6f4de6.tar.gz
OS-2009 default ipf state table size is too small
-rw-r--r--usr/src/uts/common/inet/ipf/ipf.conf5
1 files changed, 5 insertions, 0 deletions
diff --git a/usr/src/uts/common/inet/ipf/ipf.conf b/usr/src/uts/common/inet/ipf/ipf.conf
index 6b36f9fdbf..f49e024a72 100644
--- a/usr/src/uts/common/inet/ipf/ipf.conf
+++ b/usr/src/uts/common/inet/ipf/ipf.conf
@@ -1,3 +1,8 @@
#
#
name="ipf" parent="pseudo" instance=0;
+
+# Increase the state table limits. fr_statemax should be ~70% of fr_statesize,
+# and both should be prime numbers
+fr_statesize=151007;
+fr_statemax=113279;