HP-UX IPFilter Version A.03.05.14 Administrator's Guide

Dynamic Connection Allocation
DCA Variables
Chapter 3 59
DCA Variables
The following sections provide information on the fr_statemax,
fr_limitmax, and fr_tcpidletimeout variables, and how to use the
kmtune command to configure each of these variables.
fr_statemax
The purpose of the fr_statemax variable is to restrict how many state
entries can be created. Configure the values of this variable
appropriately for your environment.
The following table displays the default and minimum values for
fr_statemax. HP recommends not setting the value below the stated
minimum value. For information on changing fr_statemax and other
variables using kmtune, see “Configuring Variables” on page 60.
Memory is allocated for state and limit entries in chunks. For state
entries, memory is allocated by increments of 1,300 entries. For limit
entries, memory is allocated by increments of 500 entries. The
approximate size of the state and limit entry is 384 and 96 bytes
respectively. HP-UX IPFilter keeps the allocated memory for state and
limit entries in its private free pool.
IMPORTANT The state and limit values should not be set too high because the memory
allocations are not released back to the kernel memory pool for general
use.
Limits of fr_statemax
The fr_statemax variable indicates the number of state entries that can
be created and exist at the same time. The number of state entries, as
well as other statistics, can be viewed in the general state table. The
ipfstat -s command gives general state table statistics.
Variable Name Default Value Minimum
fr_statemax 200,000 entries 4,000 entries