K 10
svn:author
V 7
git2svn
K 8
svn:date
V 27
2022-01-09T00:46:20.741285Z
K 7
svn:log
V 786
ipfilter: Make LARGE_NAT a tunable.

LARGE_NAT is a C macro that increases
	NAT_SIZE from 127 to 2047,
	RDR_SIZE from 127 to 2047,
	HOSTMAP_SIZE from 2047 to 8191,
	NAT_TABLE_MAX from 30000 to 180000, and
	NAT_TABLE_SZ from 2047 to 16383.

These values can be altered at runtime using the ipf -T command however
some adminstrators of large firewalls rebuild the kernel to enable
LARGE_NAT at boot. This revision adds the tunable net.inet.ipf.large_nat
which allows an administrator to set this option at boot instead of build
time. Setting the LARGE_NAT macro to 1 is unaffected allowing build-time
users to continue using the old way.

(cherry picked from commit a805ffbcbce85872e71d825fd405a4a30e2ab4bc)

Git Hash:   07738547c4c95f960bac02e2b335b61a3308dc71
Git Author: cy@FreeBSD.org
END