Update script freezes Hash is full

[bulgin23]

attempting update v13.08 to v13.10

With ipset in use and using the following update script, script freezes with message:

*ERROR* IPSET: [ipset v7.1: Error in line 65537: Hash is full, cannot add more elements]

Don't know what to do. . .

[oderland_david]

Try increasing the hash size in csf.conf.

Code: Select all

# The following sets the hashsize for ipset sets, which must be a power of 2.
#
# Note: Increasing this value will consume more memory for all sets
# Default: "1024"
LF_IPSET_HASHSIZE = "1024"

[danfbach]

Were you ever able to get this working?
Increasing hashsize just led to the restart script hanging instead of erroring out.

[cloudseeder]

Increasing the LF_IPSET_MAXELEM setting resolved the problem for me. You can figure out how hight to go by watching the output from css as it starts.

CC_ALLOWPORTS all opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 match-set cc_us src
csf: IPSET loading set cc_us with 98413 entries
IPSET: [ipset v6.38: Error in line 98035: Hash is full, cannot add more elements] <-------- HERE IS THE ISSUE
csf: IPSET creating set cc_ca
CC_ALLOWPORTS all opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 match-set cc_ca src
csf: IPSET loading set cc_ca with 13441 entries
csf: IPSET creating set cc_mx
CC_ALLOWPORTS all opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 match-set cc_mx src
csf: IPSET loading set cc_mx with 2723 entries
csf: IPSET creating set cc_bm
CC_ALLOWPORTS all opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 match-set cc_bm src
csf: IPSET loading set cc_bm with 96 entries
csf: IPSET creating set cc_cr
CC_ALLOWPORTS all opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 match-set cc_cr src
csf: IPSET loading set cc_cr with 483 entries

The error was:

*ERROR* IPSET: [ipset v6.38: Error in line 98035: Hash is full, cannot add more elements]

The resolution was to increase LF_IPSET_MAXELEM to 100000:

# Note: Increasing this value will consume more memory for all sets
# Default: "65536"
LF_IPSET_MAXELEM = "100000"