diff options
author | Ermal <eri@pfsense.org> | 2010-12-03 18:44:39 +0000 |
---|---|---|
committer | Ermal <eri@pfsense.org> | 2010-12-03 18:44:39 +0000 |
commit | 6c4ccf39350636e024ec1c4023cc07f13d18835e (patch) | |
tree | 624702d5224062b32e60f3d95cf495d7e567e281 /etc/inc | |
parent | 273e9bf7dda8b7eb614bbb99d54389ba9c5f2238 (diff) | |
download | pfsense-6c4ccf39350636e024ec1c4023cc07f13d18835e.zip pfsense-6c4ccf39350636e024ec1c4023cc07f13d18835e.tar.gz |
Actually do something on flowtables. Seems later image kernels have this included.
Diffstat (limited to 'etc/inc')
-rw-r--r-- | etc/inc/filter.inc | 20 |
1 files changed, 7 insertions, 13 deletions
diff --git a/etc/inc/filter.inc b/etc/inc/filter.inc index b513df8..f0acb69 100644 --- a/etc/inc/filter.inc +++ b/etc/inc/filter.inc @@ -62,7 +62,10 @@ $aliases = ""; function flowtable_configure() { global $config, $g; - return; + + if(empty($config['system']['flowtable'])) + mwexec("/sbin/sysctl net.inet.flowtable.enable=0"); + // Figure out how many flows we should reserve // sized 2x larger than the number of unique connection destinations. if($config['system']['maximumstates'] <> "" && is_numeric($config['system']['maximumstates'])) @@ -72,21 +75,12 @@ function flowtable_configure() { // nmbflows cpu count * ($maxstates * 2) $cpus = trim(`/sbin/sysctl kern.smp.cpus | /usr/bin/cut -d' ' -f2`); $nmbflows = ($cpus*($maxstates*2)); - // flowtable is not enabled - /* - if($config['system']['flowtable']) - $flowtable_enable = 1; - else - $flowtable_enable = 0; // Flowtable currently only works on 8.0 if(get_freebsd_version() == "8") { - if($flowtable_enable == 1) { - mwexec("/sbin/sysctl net.inet.flowtable.nmbflows={$config['system']['maximumstates']}"); - mwexec("/sbin/sysctl net.inet.ip.output_flowtable_size={$nmbflows}"); - } - mwexec("/sbin/sysctl net.inet.flowtable.enable={$flowtable_enable}"); + mwexec("/sbin/sysctl net.inet.flowtable.nmbflows={$config['system']['maximumstates']}"); + mwexec("/sbin/sysctl net.inet.ip.output_flowtable_size={$nmbflows}"); + mwexec("/sbin/sysctl net.inet.flowtable.enable=1"); } - */ } function filter_load_ipfw() { |