diff options
author | Jason McIntyre <jmc@cvs.openbsd.org> | 2024-04-15 14:06:53 +0000 |
---|---|---|
committer | Jason McIntyre <jmc@cvs.openbsd.org> | 2024-04-15 14:06:53 +0000 |
commit | 4f379f2463bed0f39dfe869f2f4d30424065d90a (patch) | |
tree | dead41f61e5ed5bd6dedb501b10fd1992e0a0ed1 /share/man/man5 | |
parent | 3a5d6fa133c6ace368ea613af47e421a3cbebaa3 (diff) |
hint that the tcp timeout values can be adjusted collectively via
"set optimization"; from jesper wallin
ok bluhm
Diffstat (limited to 'share/man/man5')
-rw-r--r-- | share/man/man5/pf.conf.5 | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5 index 657e99bf8cd..e8e34217bb6 100644 --- a/share/man/man5/pf.conf.5 +++ b/share/man/man5/pf.conf.5 @@ -1,4 +1,4 @@ -.\" $OpenBSD: pf.conf.5,v 1.601 2024/04/15 14:04:49 jmc Exp $ +.\" $OpenBSD: pf.conf.5,v 1.602 2024/04/15 14:06:52 jmc Exp $ .\" .\" Copyright (c) 2002, Daniel Hartmeier .\" Copyright (c) 2003 - 2013 Henning Brauer <henning@openbsd.org> @@ -1464,6 +1464,10 @@ which corresponds to the connection state. Each packet which matches this state will reset the TTL. Tuning these values may improve the performance of the firewall at the risk of dropping valid idle connections. +Alternatively, these values may be adjusted collectively +in a manner suitable for a specific environment using +.Cm set optimization +(see above). .Pp .Bl -tag -width Ds -compact .It Cm tcp.closed Pq 90 seconds by default |