summaryrefslogtreecommitdiff
path: root/share/man/man5
diff options
context:
space:
mode:
authorJason McIntyre <jmc@cvs.openbsd.org>2024-04-15 14:06:53 +0000
committerJason McIntyre <jmc@cvs.openbsd.org>2024-04-15 14:06:53 +0000
commit4f379f2463bed0f39dfe869f2f4d30424065d90a (patch)
treedead41f61e5ed5bd6dedb501b10fd1992e0a0ed1 /share/man/man5
parent3a5d6fa133c6ace368ea613af47e421a3cbebaa3 (diff)
hint that the tcp timeout values can be adjusted collectively via
"set optimization"; from jesper wallin ok bluhm
Diffstat (limited to 'share/man/man5')
-rw-r--r--share/man/man5/pf.conf.56
1 files changed, 5 insertions, 1 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5
index 657e99bf8cd..e8e34217bb6 100644
--- a/share/man/man5/pf.conf.5
+++ b/share/man/man5/pf.conf.5
@@ -1,4 +1,4 @@
-.\" $OpenBSD: pf.conf.5,v 1.601 2024/04/15 14:04:49 jmc Exp $
+.\" $OpenBSD: pf.conf.5,v 1.602 2024/04/15 14:06:52 jmc Exp $
.\"
.\" Copyright (c) 2002, Daniel Hartmeier
.\" Copyright (c) 2003 - 2013 Henning Brauer <henning@openbsd.org>
@@ -1464,6 +1464,10 @@ which corresponds to the connection state.
Each packet which matches this state will reset the TTL.
Tuning these values may improve the performance of the
firewall at the risk of dropping valid idle connections.
+Alternatively, these values may be adjusted collectively
+in a manner suitable for a specific environment using
+.Cm set optimization
+(see above).
.Pp
.Bl -tag -width Ds -compact
.It Cm tcp.closed Pq 90 seconds by default