pf.conf.5: hint how to set tcp timeout collectively

Hint that the tcp timeout values can be adjusted collectively via "set
optimization".

from jesper wallin
ok bluhm

Obtained from:	OpenBSD, jmc <jmc@openbsd.org>, df80715c2d
Sponsored by:	Rubicon Communications, LLC ("Netgate")

This commit is contained in:

Kristof Provost

2025-08-20 16:34:33 +02:00

parent 864458ce50

commit 0a67f601fe

1 changed files with 4 additions and 0 deletions

share/man/man5/pf.conf.5

View File

@@ -267,6 +267,10 @@ which corresponds to the connection state.
 Each packet which matches this state will reset the TTL.
 Tuning these values may improve the performance of the
 firewall at the risk of dropping valid idle connections.
 Alternatively, these values may be adjusted collectively
 in a manner suitable for a specific environment using
 .Cm set optimization
 (see above).
 .Pp
 .Bl -tag -width xxxx -compact
 .It Ar tcp.first