Circuit Caches Start a TCP circuit cache named tcpcache # ipfwcircuit -T tcpcache -F -n 128 -t 4725 -N 100000 tcp { ipoffset(>=20) { accept; } not ipoffset(0) || ipdatalen(<20) { reject; } established { call("tcpcache") { accept; } reject; } not tcpflags(syn) { reject; } dstport(http/tcp) { dstaddr(www.windriver.com) { call("tcpcache" : 1); accept; } reject; } }