summaryrefslogtreecommitdiff
path: root/share/man/man5
diff options
context:
space:
mode:
authorRyan Thomas McBride <mcbride@cvs.openbsd.org>2006-05-28 02:51:07 +0000
committerRyan Thomas McBride <mcbride@cvs.openbsd.org>2006-05-28 02:51:07 +0000
commit7e853a372e03a60e330b4ff106ebe9eadf115ff2 (patch)
tree54557138292e69a75ed3bd45fd7f2eeaf7505a4c /share/man/man5
parent8f6b1767784802b86d98ef93db9da9599a10c2bf (diff)
Adaptive timeouts are now on by default.
Diffstat (limited to 'share/man/man5')
-rw-r--r--share/man/man5/pf.conf.58
1 files changed, 6 insertions, 2 deletions
diff --git a/share/man/man5/pf.conf.5 b/share/man/man5/pf.conf.5
index e4e45be91ba..d376e241e78 100644
--- a/share/man/man5/pf.conf.5
+++ b/share/man/man5/pf.conf.5
@@ -1,4 +1,4 @@
-.\" $OpenBSD: pf.conf.5,v 1.346 2006/05/14 15:51:42 deraadt Exp $
+.\" $OpenBSD: pf.conf.5,v 1.347 2006/05/28 02:51:06 mcbride Exp $
.\"
.\" Copyright (c) 2002, Daniel Hartmeier
.\" All rights reserved.
@@ -308,9 +308,13 @@ When reaching this number of state entries, all timeout values become
zero, effectively purging all state entries immediately.
This value is used to define the scale factor, it should not actually
be reached (set a lower state limit, see below).
+Adaptive timeouts are enabled by default, with an adaptive.start value
+equal to 60% of the state limit, and an adaptive.end value equal to
+120% of the state limit.
+They can be disabled by setting both adaptive.start and adaptive.end to 0.
.El
.Pp
-These values can be defined both globally and for each rule.
+The adaptive timeout values can be defined both globally and for each rule.
When used on a per-rule basis, the values relate to the number of
states created by the rule, otherwise to the total number of
states.