Re: A detail about pf.conf

2016-10-29 Thread Nicolai
On Sat, Oct 29, 2016 at 04:48:51PM +0200, Walter Alejandro Iglesias wrote: > Any of these syntax examples return errors: > > blockIP="/path/to/file" > blockIP=/path/to/file > table persist file "$blockIP" Maybe I misunderstand what you're trying to do, but try this instead: table

Re: strict separation base system and third party software

2016-10-29 Thread Christian Weisgerber
On 2016-10-29, Mihai Popescu wrote: > Folks, since we are at it, does anyone knows why 'OpenBSD' is spelled > like that and not 'openbsd' . I was ponder that for a time, because I > know you all hate camelCase notation. > Is it ok open_bsd? For better security: set -A c l u;

Re: strict separation base system and third party software

2016-10-29 Thread Mihai Popescu
Folks, since we are at it, does anyone knows why 'OpenBSD' is spelled like that and not 'openbsd' . I was ponder that for a time, because I know you all hate camelCase notation. Is it ok open_bsd? Many thanks :-)

Re: tw_cli support

2016-10-29 Thread Stuart Henderson
On 2016-10-28, scar wrote: > I would like to re-purpose an old machine for backup storage. It has a > 3ware 9650SE-24M8 RAID card in it that i currently use tw_cli on linux > to manage. The downloads for this product are at [1]. The downloads > provided are only for

Re: softraid crypto performance on Sun Fire T1000

2016-10-29 Thread Jonathan Schleifer
> Uhm, but the dd command wasn't :-) (the guest's root disk is sd2, not sd0...) > > Now our numbers align much better: > > # dd if=/dev/rsd2c of=/dev/null bs=10m count=50 > 50+0 records in > 50+0 records out > 524288000 bytes transferred in 131.796 secs (3978008 bytes/sec) Ah, thanks. I was just

Re: softraid crypto performance on Sun Fire T1000

2016-10-29 Thread Stefan Sperling
On Sat, Oct 29, 2016 at 07:53:06PM +0200, Stefan Sperling wrote: > > Are you sure that LDOM was indeed using softraid crypto? > > Yes. Uhm, but the dd command wasn't :-) (the guest's root disk is sd2, not sd0...) Now our numbers align much better: # dd if=/dev/rsd2c of=/dev/null bs=10m

Re: softraid crypto performance on Sun Fire T1000

2016-10-29 Thread Stefan Sperling
On Sat, Oct 29, 2016 at 07:39:29PM +0200, Jonathan Schleifer wrote: > > I have the 1GHz version with 4 cores (32 threads). > > Ok, so same per-core speed, so single-threaded performance should be the same. > (Btw, you have 8 cores, not 4. 8 cores @ 4 threads each.) > > > Otherwise it's probably

Re: softraid crypto performance on Sun Fire T1000

2016-10-29 Thread Jonathan Schleifer
> I have the 1GHz version with 4 cores (32 threads). Ok, so same per-core speed, so single-threaded performance should be the same. (Btw, you have 8 cores, not 4. 8 cores @ 4 threads each.) > Otherwise it's probably similar to yours. > It's running 6.0 at the moment, yes. Some guests are running

Re: softraid crypto performance on Sun Fire T1000

2016-10-29 Thread Stefan Sperling
On Sat, Oct 29, 2016 at 06:57:00PM +0200, Jonathan Schleifer wrote: > Oh, wow, these are *much* better than what I get. Which CPU do you have? I > have 6x 1 GHz (meaning 24 threads). Are you running 6.0? > > Thank you for these numbers, they make me much more hopeful about this > machine. I

Re: softraid crypto performance on Sun Fire T1000

2016-10-29 Thread Jonathan Schleifer
Am 29.10.2016 um 18:34 schrieb Stefan Sperling : > On Sat, Oct 29, 2016 at 06:08:37PM +0200, Jonathan Schleifer wrote: >> Hm, my main problem seems to be that whenever I decrypt something from the >> disk, all other 23 cores seem to get stalled. >> >> So, would you recommend doing

Re: softraid crypto performance on Sun Fire T1000

2016-10-29 Thread Stefan Sperling
On Sat, Oct 29, 2016 at 06:08:37PM +0200, Jonathan Schleifer wrote: > Hm, my main problem seems to be that whenever I decrypt something from the > disk, all other 23 cores seem to get stalled. > > So, would you recommend doing the following then: > > * Have a partition for the main system on a

Re: softraid crypto performance on Sun Fire T1000

2016-10-29 Thread Jonathan Schleifer
Hi, > I run a T1000 which is segregated into a couple of LDOM guests (about 10). > Some of the guests use softraid crypto inside. The host does not. Yeah, I was planning on using LDOMs as well. However, since I wanted to put this into a datacenter (for a cheap price, so it not being the most

Re: softraid crypto performance on Sun Fire T1000

2016-10-29 Thread Stefan Sperling
On Sat, Oct 29, 2016 at 05:12:51PM +0200, Jonathan Schleifer wrote: > Another thing I noticed: > > When running dd if=/dev/zero of=foo bs=65536, my SSH connection gets extremely > laggy. If I open 4 more in parallel, all go down to KB/s of writes, and SSH > becomes unusable. Now unusable as in

Re: ldapd(8) database bootstrap error

2016-10-29 Thread Frank Groeneveld
On Sat, Oct 29, 2016 at 10:14:00AM +0800, Zhang Huangbin wrote: > You must create the root dn (dc=example,dc=com) first. For example: > > dn: dc=example,dc=com > objectclass: dcObject > objectclass: organization > dc: example > o: example > > > Zhang Huangbin, founder of iRedMail project:

Re: softraid crypto performance on Sun Fire T1000

2016-10-29 Thread Jonathan Schleifer
Another thing I noticed: When running dd if=/dev/zero of=foo bs=65536, my SSH connection gets extremely laggy. If I open 4 more in parallel, all go down to KB/s of writes, and SSH becomes unusable. Now unusable as in things need forever to start. Unusable as in I press a key and it takes forever

Is /etc/acme-client.conf used by acme-client?

2016-10-29 Thread Walter Alejandro Iglesias
Does acme-client take in care /etc/acme-client.conf in any way? Entries as the documented in acme-client.conf man page: domain example.com { alternative names { secure.example.com } domain key /etc/ssl/private/example.com.key domain certificate /etc/ssl/example.com.crt

A detail about pf.conf

2016-10-29 Thread Walter Alejandro Iglesias
I post this here because I don't know if considering it bug. To use a macro in the "file" table option I had to enclose double on single quotes: blockIP='"/path/to/file"' table persist file $blockIP Any of these syntax examples return errors: blockIP="/path/to/file"

softraid crypto performance on Sun Fire T1000

2016-10-29 Thread Jonathan Schleifer
Hi! I just installed OpenBSD 6.0 on my Sun Fire T1000 (with 2 SAS HDs in a hardware RAID 1 that I set up from OpenBoot). However, I only get read rates of less than 2 MB/s from sd1a (the softraid), but reads from sd0d (the underlying partition of the softraid) get magnitudes more. While a single