3 ms·
i just checked my main user-facing dns servers, and indeed i disabled pf on them on my big-boi pf NAT cluster, i keep the udp timeout relatively low to deal wi
by chriscappuccio 3y ago
i just checked my main user-facing dns servers, and indeed i disabled pf on them
on my big-boi pf NAT cluster, i keep the udp timeout relatively low to deal with state table congestion:
set limit { states 1000000, src-nodes 100000 }
set state-defaults pflow, sloppy
set state-policy floating
set timeout src.track 240
set timeout udp.multiple 120