aboutsummaryrefslogtreecommitdiff
path: root/share/man/man4/pfsync.4
Commit message (Collapse)AuthorAgeFilesLines
* Remove $FreeBSD$: two-line nroff patternWarner Losh2023-08-231-2/+0
| | | | | | | Remove /^\.\\"\n\.\\"\s*\$FreeBSD\$$\n/ Similar commit in main: (cherry picked from commit fa9896e082a1)
* pfsync: Performance improvementKristof Provost2018-12-061-1/+8
| | | | | | | | | | | | | | | | | | | | | | | | | pfsync code is called for every new state, state update and state deletion in pf. While pf itself can operate on multiple states at the same time (on different cores, assuming the states hash to a different hashrow), pfsync only had a single lock. This greatly reduced throughput on multicore systems. Address this by splitting the pfsync queues into buckets, based on the state id. This ensures that updates for a given connection always end up in the same bucket, which allows pfsync to still collapse multiple updates into one, while allowing multiple cores to proceed at the same time. The number of buckets is tunable, but defaults to 2 x number of cpus. Benchmarking has shown improvement, depending on hardware and setup, from ~30% to ~100%. MFC after: 1 week Sponsored by: Orange Business Services Differential Revision: https://reviews.freebsd.org/D18373 Notes: svn path=/head/; revision=341646
* Correct multicast address used in pfsync(4)Sevan Janiyan2017-08-181-2/+2
| | | | | | | | | | | | | | As stated in src/sys/netinet/in.h L395, address used is 224.0.0.240. PR: 216885 Submitted by: Matthias Ordner <matthias.ordner AT noris DOT net> Reviewed by: kp Approved by: bcr (mentor) MFC after: 5 days Differential Revision: https://reviews.freebsd.org/D12011 Notes: svn path=/head/; revision=322663
* Remove duplicate sentence from pfsync.8.Dru Lavigne2016-05-271-1/+0
| | | | | | | | | | PR: 209539 Submitted by: olivier@ Reviewed by: timmoore88@gmail.com Sponsored by: iXsystems Notes: svn path=/head/; revision=300864
* Sort SEE ALSOBaptiste Daroussin2014-12-261-2/+2
| | | | Notes: svn path=/head/; revision=276259
* Fix various mdoc issues.Christian Brueffer2014-12-211-1/+1
| | | | | | | Found with: mandoc -Tlint Notes: svn path=/head/; revision=275990
* o Create directory sys/netpfil, where all packet filters shouldGleb Smirnoff2012-09-141-0/+229
reside, and move there ipfw(4) and pf(4). o Move most modified parts of pf out of contrib. Actual movements: sys/contrib/pf/net/*.c -> sys/netpfil/pf/ sys/contrib/pf/net/*.h -> sys/net/ contrib/pf/pfctl/*.c -> sbin/pfctl contrib/pf/pfctl/*.h -> sbin/pfctl contrib/pf/pfctl/pfctl.8 -> sbin/pfctl contrib/pf/pfctl/*.4 -> share/man/man4 contrib/pf/pfctl/*.5 -> share/man/man5 sys/netinet/ipfw -> sys/netpfil/ipfw The arguable movement is pf/net/*.h -> sys/net. There are future plans to refactor pf includes, so I decided not to break things twice. Not modified bits of pf left in contrib: authpf, ftp-proxy, tftp-proxy, pflogd. The ipfw(4) movement is planned to be merged to stable/9, to make head and stable match. Discussed with: bz, luigi Notes: svn path=/head/; revision=240494