Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Borja Marcos
On Jan 3, 2012, at 8:07 AM, Nikolay Denev wrote: On Jan 3, 2012, at 5:53 AM, Doug Barton wrote: We have a pair of physical FreeBSD systems configured as routers designed to operate in an active/standby CARP configuration. Everything used to work fine, but since an upgrade to 8.2-STABLE

Re: how to debug non-working hole in nat

2012-01-03 Thread Randy Bush
ignore. i sorted it. randy ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org

Re: how to debug non-working hole in nat

2012-01-03 Thread Paul A. Procacci
add divert natd all from any to any via bridge0 This nat's all internal traffic on your lan. You probably don't want this. I'd place the nat on the tun0 interface. Which leads me to If you machine receives a syn from the tun0 interface, what firewall rule is in place to redirect

Re: Panic in the udp_input() under heavy load

2012-01-03 Thread Robert Watson
On Fri, 30 Dec 2011, Maxim Sobolev wrote: On 12/30/2011 4:46 PM, Maxim Sobolev wrote: I see. Would you guys mind if I put that NULL pointer check into the code for the time being and turn it into some kind of big nasty warning in 8-stable branch only? I could also open a ticket, put all

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Ed Maste
On Tue, Jan 03, 2012 at 09:07:56AM +0200, Nikolay Denev wrote: Since I've had similar problem with Quagga after updating to 8.2-STABLE I'd suggest you to try setting net.inet.tcp.signature_verify_input=0 and see if that would help. Here is another thread about the similar (if not the

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Borja Marcos
On Jan 3, 2012, at 4:29 PM, Ed Maste wrote: On Tue, Jan 03, 2012 at 09:07:56AM +0200, Nikolay Denev wrote: Since I've had similar problem with Quagga after updating to 8.2-STABLE I'd suggest you to try setting net.inet.tcp.signature_verify_input=0 and see if that would help. Here is

Re: Use of spinlocks for TCP callouts

2012-01-03 Thread John Baldwin
On Monday, January 02, 2012 11:35:31 pm Vijay Singh wrote: I have see the following call sequence in profiles: called/total parents index %timeself descendents called+selfname index called/total

Re: Transitioning if_addr_lock to an rwlock

2012-01-03 Thread John Baldwin
On Thursday, December 29, 2011 5:55:39 pm Gleb Smirnoff wrote: On Thu, Dec 29, 2011 at 03:27:26PM -0500, John Baldwin wrote: J - if_addr_uses.patch This changes callers of the existing macros to use J either read or write locks. This is the patch that J

Re: how to debug non-working hole in nat

2012-01-03 Thread Ian Smith
On Tue, 3 Jan 2012 17:52:53 +0900, Randy Bush wrote: ignore. i sorted it. Too late, sucked in .. diff from prior config might be bone enough? cheers, Ian ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net

Re: [PATCH] Use of unreferenced ifa in in6

2012-01-03 Thread Bjoern A. Zeeb
On 23. Dec 2011, at 20:08 , John Baldwin wrote: The code to handle the SIOCGLIFADDR and SIOCDLIFADDR ioctls in in6_lifaddr_ioctl() does not grab a reference to an ifnet address structure that it uses after dropping the IF_ADDR_LOCK(). Based on other code that uses a similar pattern of

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Borja Marcos
On Jan 3, 2012, at 4:29 PM, Ed Maste wrote: Thanks for the link Nikolay. Borja, I assume it's the PR submission form that gave you trouble - sorry for that. Based on your report it sounds to me like the bug is in OpenBGPd itself. If it works on OpenBSD with the TCP_MD5SIG option though

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Bjoern A. Zeeb
On 3. Jan 2012, at 17:47 , Borja Marcos wrote: On Jan 3, 2012, at 4:29 PM, Ed Maste wrote: Thanks for the link Nikolay. Borja, I assume it's the PR submission form that gave you trouble - sorry for that. Based on your report it sounds to me like the bug is in OpenBGPd itself. If it

Re: [PATCH] Use of unreferenced ifa in in6

2012-01-03 Thread John Baldwin
On Tuesday, January 03, 2012 12:35:30 pm Bjoern A. Zeeb wrote: On 23. Dec 2011, at 20:08 , John Baldwin wrote: The code to handle the SIOCGLIFADDR and SIOCDLIFADDR ioctls in in6_lifaddr_ioctl() does not grab a reference to an ifnet address structure that it uses after dropping the

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Doug Barton
On 01/03/2012 10:03, Bjoern A. Zeeb wrote: On 3. Jan 2012, at 17:47 , Borja Marcos wrote: On Jan 3, 2012, at 4:29 PM, Ed Maste wrote: Thanks for the link Nikolay. Borja, I assume it's the PR submission form that gave you trouble - sorry for that. Based on your report it sounds to me

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Hiroki Sato
Doug Barton do...@freebsd.org wrote in 4f027bc0.1080...@freebsd.org: do We have a pair of physical FreeBSD systems configured as routers do designed to operate in an active/standby CARP configuration. Everything do used to work fine, but since an upgrade to 8.2-STABLE on December 29th do the

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Bjoern A. Zeeb
On 3. Jan 2012, at 19:00 , Doug Barton wrote: On 01/03/2012 10:03, Bjoern A. Zeeb wrote: On 3. Jan 2012, at 17:47 , Borja Marcos wrote: On Jan 3, 2012, at 4:29 PM, Ed Maste wrote: Thanks for the link Nikolay. Borja, I assume it's the PR submission form that gave you trouble -

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Doug Barton
On 01/03/2012 11:16, Bjoern A. Zeeb wrote: I was wondering from *where* you were updating, not to which revision. D'oh! Sorry ... the previous kernel was from stable/8 about 6 months ago. Well before Attilio's merge. Doug -- You can observe a lot just by watching. -- Yogi Berra

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread sthaug
Doug, does your kernel have TCP_SIGNATURE option? The patch[*] for net/openbgpd can be used as a workaround if it was due to TCP_MD5SIG option on the listening sockets. [*] http://people.allbsd.org/~hrs/FreeBSD/openbgpd.20120104-1.diff While this is an ugly hack and I will

Re: [PATCH] Use of unreferenced ifa in in6

2012-01-03 Thread Sergey Kandaurov
On 24 December 2011 00:08, John Baldwin j...@freebsd.org wrote: The code to handle the SIOCGLIFADDR and SIOCDLIFADDR ioctls in in6_lifaddr_ioctl() does not grab a reference to an ifnet address structure that it uses after dropping the IF_ADDR_LOCK().  Based on other code that uses a similar

Re: Transitioning if_addr_lock to an rwlock

2012-01-03 Thread Bjoern A. Zeeb
On 3. Jan 2012, at 16:23 , John Baldwin wrote: On Thursday, December 29, 2011 5:55:39 pm Gleb Smirnoff wrote: On Thu, Dec 29, 2011 at 03:27:26PM -0500, John Baldwin wrote: J - if_addr_uses.patch This changes callers of the existing macros to use J either read

Re: [PATCH] Use of unreferenced ifa in in6

2012-01-03 Thread John Baldwin
On Tuesday, January 03, 2012 2:36:25 pm Sergey Kandaurov wrote: On 24 December 2011 00:08, John Baldwin j...@freebsd.org wrote: The code to handle the SIOCGLIFADDR and SIOCDLIFADDR ioctls in in6_lifaddr_ioctl() does not grab a reference to an ifnet address structure that it uses after

Re: [PATCH] Use of unreferenced ifa in in6

2012-01-03 Thread Sergey Kandaurov
On 4 January 2012 00:17, John Baldwin j...@freebsd.org wrote: On Tuesday, January 03, 2012 2:36:25 pm Sergey Kandaurov wrote: On 24 December 2011 00:08, John Baldwin j...@freebsd.org wrote: The code to handle the SIOCGLIFADDR and SIOCDLIFADDR ioctls in in6_lifaddr_ioctl() does not grab a

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Doug Barton
On 01/03/2012 11:06, Hiroki Sato wrote: Doug Barton do...@freebsd.org wrote in 4f027bc0.1080...@freebsd.org: do We have a pair of physical FreeBSD systems configured as routers do designed to operate in an active/standby CARP configuration. Everything do used to work fine, but since an

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Hiroki Sato
Doug Barton do...@freebsd.org wrote in 4f036a7f.9030...@freebsd.org: do This patch works even if net.inet.tcp.signature_verify_input=1. If I do turn that sysctl off on both sides they can talk to each other even do without the patch. So that would definitely seem to indicate that the do

Re: Transitioning if_addr_lock to an rwlock

2012-01-03 Thread Bjoern A. Zeeb
On 29. Dec 2011, at 22:55 , Gleb Smirnoff wrote: 3) I've found that in6_ifawithifp() doesn't do what it is supposed to, as well as uses incorrect locking during this. As last resort it should run through global list of addresses, not run throgh the ifp one again. Patch attached. the first

Re: how to debug non-working hole in nat

2012-01-03 Thread Randy Bush
ignore. i sorted it. Too late, sucked in .. diff from prior config might be bone enough? i had forgotten to remove the nat enable from /etc/ppp/ppp.conf when i moved to natd. randy ___ freebsd-net@freebsd.org mailing list

Re: [PATCH] Use of unreferenced ifa in in6

2012-01-03 Thread John Baldwin
On Tuesday, January 03, 2012 3:44:50 pm Sergey Kandaurov wrote: On 4 January 2012 00:17, John Baldwin j...@freebsd.org wrote: On Tuesday, January 03, 2012 2:36:25 pm Sergey Kandaurov wrote: On 24 December 2011 00:08, John Baldwin j...@freebsd.org wrote: The code to handle the SIOCGLIFADDR

Re: Transitioning if_addr_lock to an rwlock

2012-01-03 Thread John Baldwin
On Thursday, December 29, 2011 5:55:39 pm Gleb Smirnoff wrote: Reviewing your patch I've found several problems not introduced by it, but already existing, and somewhat related to your patch: 2) Potential race when dropping a lock inside FOREACH loop: igmp.c:2058 mld6.c:1419 mld6.c:1704

Re: [PATCH] Use of unreferenced ifa in in6

2012-01-03 Thread Hiroki Sato
John Baldwin j...@freebsd.org wrote in 201201031608.59688@freebsd.org: jh With this patch in_lifaddr_ioctl() now looks more syntactically similar jh to in6_lifaddr_ioctl(). They could look even more similar by eliminating jh a lot of whitespace changes present here or there. jh jh Hmmm.

Re: Transitioning if_addr_lock to an rwlock

2012-01-03 Thread Bjoern A. Zeeb
On 29. Dec 2011, at 20:27 , John Baldwin wrote: I've gone ahead with this approach. I have three separate patches that should implement Phase 1. All of them can be found at http://www.FreeBSD.org/~jhb/patches/ - if_addr_dev.patch This fixes a few new device drivers that were using

Re: [PATCH] Use of unreferenced ifa in in6

2012-01-03 Thread John Baldwin
On Tuesday, January 03, 2012 5:14:22 pm Hiroki Sato wrote: John Baldwin j...@freebsd.org wrote in 201201031608.59688@freebsd.org: jh With this patch in_lifaddr_ioctl() now looks more syntactically similar jh to in6_lifaddr_ioctl(). They could look even more similar by eliminating jh

Re: [PATCH] Use of unreferenced ifa in in6

2012-01-03 Thread Bjoern A. Zeeb
On 3. Jan 2012, at 22:22 , John Baldwin wrote: On Tuesday, January 03, 2012 5:14:22 pm Hiroki Sato wrote: John Baldwin j...@freebsd.org wrote in 201201031608.59688@freebsd.org: jh With this patch in_lifaddr_ioctl() now looks more syntactically similar jh to in6_lifaddr_ioctl().

Re: Transitioning if_addr_lock to an rwlock

2012-01-03 Thread Bjoern A. Zeeb
On 3. Jan 2012, at 21:45 , John Baldwin wrote: On Thursday, December 29, 2011 5:55:39 pm Gleb Smirnoff wrote: Reviewing your patch I've found several problems not introduced by it, but already existing, and somewhat related to your patch: 2) Potential race when dropping a lock inside

NDP Problem

2012-01-03 Thread Pawel Tyll
Hi lists, I'm observing something strange. ipv6_enable=YES ipv6_gateway_enable=YES ipv6_network_interfaces=vlan3901 ipv6_ifconfig_vlan3901=2001:7f8:42::a503:9310:1/64 vlan3901: flags=8943UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST metric 0 mtu 1500 options=3RXCSUM,TXCSUM

Re: NDP Problem

2012-01-03 Thread Hiroki Sato
Pawel Tyll pt...@nitronet.pl wrote in 1609249417.20120104033...@nitronet.pl: pt Hi lists, pt pt I'm observing something strange. pt pt ipv6_enable=YES pt ipv6_gateway_enable=YES pt ipv6_network_interfaces=vlan3901 pt ipv6_ifconfig_vlan3901=2001:7f8:42::a503:9310:1/64 pt pt vlan3901:

Re: NDP Problem

2012-01-03 Thread Pawel Tyll
Hi Hiroki, Does the attached patch (for 8.x kernel) fix your problem? Unfortunately, it doesn't. :( ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to

Re: NDP Problem

2012-01-03 Thread Hiroki Sato
Pawel Tyll pt...@nitronet.pl wrote in 1161157726.20120104052...@nitronet.pl: pt Hi Hiroki, pt pt Does the attached patch (for 8.x kernel) fix your problem? pt Unfortunately, it doesn't. :( Okay, so could you explain in more detail what symptoms made you think NDP didn't work properly? The

pf not seeing inbound packets on netgraph interface

2012-01-03 Thread Ed Carrel
Hi freebsd-net, I originally sent this to -questions@, but was redirected here by that list. My original question is below: I am running into a roadblock getting PF to filter traffic on a Netgraph interface representing an L2TP/IPSec connection. I have done some narrowing down of the problem,

Any recommendations for a 10G NIC from Broadcom

2012-01-03 Thread Vijay Singh
Hi. I would like to try out a 10G NIC from Broadcom. The BCM5716 seems promising. I am looking for features such as multi-queue, MSI-X, TSO etc. Any recommendations would be greatly appreciated. -vijay PS: I'd be using FreeBSD 8.2 initially, and FreeBSD 9.x in a few months.

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Nikolay Denev
On Jan 3, 2012, at 10:52 PM, Doug Barton wrote: On 01/03/2012 11:06, Hiroki Sato wrote: Doug Barton do...@freebsd.org wrote in 4f027bc0.1080...@freebsd.org: do We have a pair of physical FreeBSD systems configured as routers do designed to operate in an active/standby CARP configuration.

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Doug Barton
On 01/03/2012 21:23, Nikolay Denev wrote: You are setting the keys with setkey for both directions of a single session, right? Yes. But thanks for asking. :) Doug -- You can observe a lot just by watching. -- Yogi Berra Breadth of IT experience, and depth of knowledge in

Re: openbgpds not talking each other since 8.2-STABLE upgrade

2012-01-03 Thread Nikolay Denev
On Jan 3, 2012, at 9:36 PM, sth...@nethelp.no wrote: Doug, does your kernel have TCP_SIGNATURE option? The patch[*] for net/openbgpd can be used as a workaround if it was due to TCP_MD5SIG option on the listening sockets. [*] http://people.allbsd.org/~hrs/FreeBSD/openbgpd.20120104-1.diff