synproxy and tcp window
Hi, When using synproxy state, PF seems to set the TCP window size to zero in ACK packets. This breaks some network configurations, is this normal/desired ? With synproxy state, we have win 0 : 14:33:02.934065 0800 74: 37.161.129.131.45134 192.168.1.2.80: S 1330066024:1330066024(0) win 14600 mss 1300,sackOK,timestamp 487381 0,nop,wscale 5 (DF) 14:33:02.934081 0800 58: 192.168.1.2.80 37.161.129.131.45134: S 3486079161:3486079161(0) ack 1330066025 win 0 mss 1300 (DF) [tos 0x10] With keep state, we have win 16384 : 14:33:17.408264 0800 74: 37.161.129.131.45138 192.168.1.2.80: S 1699948830:1699948830(0) win 14600 mss 1300,sackOK,timestamp 488833 0,nop,wscale 5 (DF) 14:33:17.408308 0800 78: 192.168.1.2.80 37.161.129.131.45138: S 2729008284:2729008284(0) ack 1699948831 win 16384 mss 1460,nop,nop,sackOK,nop,wscale 3,nop,nop,timestamp 3670084025 488833 (DF)
Re: PF with gigabit voice/video streams
On 06/03/11 20:48, Eric K. Miller wrote: I might start a capabilities war, but we've seen OpenBSD become CPU bound with about 150k packets per second with some pretty fast hardware. Funny, I have more than 300kpps. With pf enabled, of course. This is without PF running. I'm sure there are a million tweaks that can be done to improve this, but expecting OpenBSD + PF to process small packets (lets say 128 byte packets on average), resulting in 1 million packets per second on a full 1Gbps connection, is probably not going to happen.
round-robin and sticky-address
Previously : http://marc.info/?l=openbsd-miscm=127479158820937w=2
I am trying to make sticky-address work on 4.9-current, where this rule :
pass in on $int_if from $int_net route-to { ($ispA_if $ispA_gw)
($ispB_if $ispB_gw) } round-robin sticky-address
evaluates to :
table __automatic_ff7c0220_0 const { 192.168.1.1@em0 192.168.2.1@em1 }
pass in on bge0 inet from 192.168.0.0/24 to any flags S/SA keep state
route-to __automatic_ff7c0220_0 round-robin
So sticky-address goes to the void.
After digging I found it's after apply_redirspec(r-route, r, rroute,
2, dst_port) in parse.y, rs-pool_opts.opts is always 0 so we keep only
rs-pool_opts.type in rpool-opts. A fake redirspec is callocated, so I
did try to initialize it with current values, see following diff. The
sticky-address flag is then well propagated, but my system then panic in
pf_remove_src_node after a couple of seconds.
Before digging further, is this the right way ? Am I missing something ?
Comments and hints welcome.
--
Index: parse.y
===
RCS file: /cvs/openbsd/src/sbin/pfctl/parse.y,v
retrieving revision 1.597
diff -u -r1.597 parse.y
--- parse.y 31 Dec 2010 12:15:31 - 1.597
+++ parse.y 23 Mar 2011 16:46:32 -
@@ -2061,6 +2061,8 @@
sizeof(*$8.rroute.rdr))) == NULL)
err(1, $8.rroute.rdr);
$8.rroute.rdr-host = $8.route.host;
+ $8.rroute.pool_opts.type =
$8.route.pool_opts PF_POOL_TYPEMASK;
+ $8.rroute.pool_opts.opts =
$8.route.pool_opts;
}
if ($8.queues.qname != NULL) {
if (strlcpy(r.qname, $8.queues.qname,
Re: network bandwith with em(4)
On 02/24/11 19:28, RLW wrote: W dniu 2011-02-24 12:11, Patrick Lamaiziere pisze: Le Wed, 23 Feb 2011 22:09:18 +0100, Manuel Guesdonml+openbsd.m...@oxymium.net a icrit : | Did you try to increase the number of descriptor? | #define EM_MAX_TXD 256 | #define EM_MAX_RXD 256 | | I've tried up to 2048 (and with MAX_INTS_PER_SEC = 16000) but it looks | worth. Thank you ! I'll investigate this ! As I said it is worth here. The load is increaded and I lose around 50 Mbits of bandwith. I was curious if you've made some tests on this. ok, so the conclusion might be, that if one want to have transfers bigger than 300mbit/s on em(4), one should tuning the em(4) driver source code? I have firewalls with more than 300Mbit/s and standard GENERIC.MP.
alc0 panic and splassert: assertwaitok: want -1 have 1
When booting 4.9-beta/amd64 without a network cable plugged, I get a lot of splassert failures. After changing kern.splassert to 3 I was able to get the following trace (get with dmesg after a reboot) : OpenBSD 4.9-beta (GENERIC.MP) #786: Tue Jan 25 17:46:34 MST 2011 t...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 1062797312 (1013MB) avail mem = 1020477440 (973MB) mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.6 @ 0xf0760 (31 entries) bios0: vendor American Megatrends Inc. version 0904 date 08/12/2010 bios0: ASUSTeK Computer INC. 1005PX acpi0 at bios0: rev 2 acpi0: sleep states S0 S3 S4 S5 acpi0: tables DSDT FACP APIC MCFG ECDT OEMB HPET GSCI SSDT SLIC acpi0: wakeup devices P0P1(S4) P0P4(S4) P0P5(S4) P0P6(S4) P0P7(S4) acpitimer0 at acpi0: 3579545 Hz, 24 bits acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: Intel(R) Atom(TM) CPU N450 @ 1.66GHz, 1666.71 MHz cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,EST,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE,NXE,LONG cpu0: 512KB 64b/line 8-way L2 cache cpu0: apic clock running at 166MHz cpu1 at mainbus0: apid 1 (application processor) cpu1: Intel(R) Atom(TM) CPU N450 @ 1.66GHz, 1666.48 MHz cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,EST,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE,NXE,LONG cpu1: 512KB 64b/line 8-way L2 cache ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins ioapic0: misconfigured as apic 1, remapped to apid 2 acpimcfg0 at acpi0 addr 0xe000, bus 0-255 acpiec0 at acpi0acpiec _REG failed, broken BIOS acpihpet0 at acpi0: 14318179 Hz acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus 4 (P0P4) acpiprt2 at acpi0: bus 2 (P0P5) acpiprt3 at acpi0: bus -1 (P0P6) acpiprt4 at acpi0: bus 1 (P0P7) acpiec at acpi0 not configured acpicpu0 at acpi0: C3, C2, C1, PSS acpicpu1 at acpi0: C3, C2, C1, PSS acpitz at acpi0 not configured acpibat at acpi0 not configured acpiac at acpi0 not configured acpiasus0 at acpi0 acpibtn0 at acpi0: LID_ acpibtn1 at acpi0: SLPB acpibtn2 at acpi0: PWRB acpivideo0 at acpi0: VGA_ acpivout0 at acpivideo0: CRTD acpivout1 at acpivideo0: TVOD acpivout2 at acpivideo0: LCDD cpu0: Enhanced SpeedStep 1666 MHz: speeds: 1667, 1333, 1000 MHz pci0 at mainbus0 bus 0 pchb0 at pci0 dev 0 function 0 Intel Pineview DMI rev 0x00 vga1 at pci0 dev 2 function 0 Intel Pineview Video rev 0x00 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) intagp0 at vga1 agp0 at intagp0: aperture at 0xd000, size 0x1000 inteldrm0 at vga1: apic 2 int 16 (irq 15) drm0 at inteldrm0 Intel Pineview Video rev 0x00 at pci0 dev 2 function 1 not configured azalia0 at pci0 dev 27 function 0 Intel 82801GB HD Audio rev 0x02: apic 2 int 22 (irq 4) azalia0: codecs: Realtek ALC269 audio0 at azalia0 ppb0 at pci0 dev 28 function 0 Intel 82801GB PCIE rev 0x02: apic 2 int 16 (irq 15) pci1 at ppb0 bus 4 ppb1 at pci0 dev 28 function 1 Intel 82801GB PCIE rev 0x02: apic 2 int 17 (irq 10) pci2 at ppb1 bus 2 athn0 at pci2 dev 0 function 0 Atheros AR2427 rev 0x01: apic 2 int 17 (irq 10) athn0: AR9285 rev 2 (1T1R), ROM rev 13, address 48:5d:60:24:0f:2b ppb2 at pci0 dev 28 function 3 Intel 82801GB PCIE rev 0x02: apic 2 int 19 (irq 11) pci3 at ppb2 bus 1 alc0 at pci3 dev 0 function 0 Attansic Technology L2C rev 0xc0: apic 2 int 19 (irq 11), address 20:cf:30:70:8f:31 atphy0 at alc0 phy 0: F1 10/100/1000 PHY, rev. 11 uhci0 at pci0 dev 29 function 0 Intel 82801GB USB rev 0x02: apic 2 int 23 (irq 3) uhci1 at pci0 dev 29 function 1 Intel 82801GB USB rev 0x02: apic 2 int 19 (irq 11) uhci2 at pci0 dev 29 function 2 Intel 82801GB USB rev 0x02: apic 2 int 18 (irq 7) uhci3 at pci0 dev 29 function 3 Intel 82801GB USB rev 0x02: apic 2 int 16 (irq 15) ehci0 at pci0 dev 29 function 7 Intel 82801GB USB rev 0x02: apic 2 int 23 (irq 3) usb0 at ehci0: USB revision 2.0 uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1 ppb3 at pci0 dev 30 function 0 Intel 82801BAM Hub-to-PCI rev 0xe2 pci4 at ppb3 bus 5 pcib0 at pci0 dev 31 function 0 Intel Tigerpoint LPC rev 0x02 ahci0 at pci0 dev 31 function 2 Intel 82801GR AHCI rev 0x02: apic 2 int 21 (irq 5), AHCI 1.1 scsibus0 at ahci0: 32 targets sd0 at scsibus0 targ 0 lun 0:ATA, WDC WD2500BEVT-8, 01.0 SCSI3 0/direct fixed sd0: 238475MB, 512 bytes/sec, 488397168 sec total ichiic0 at pci0 dev 31 function 3 Intel 82801GB SMBus rev 0x02: apic 2 int 21 (irq 11) iic0 at ichiic0 spdmem0 at iic0 addr 0x50: 1GB DDR2 SDRAM non-parity PC2-6400CL5 SO-DIMM usb1 at uhci0: USB revision 1.0 uhub1 at usb1 Intel UHCI root hub rev 1.00/1.00 addr 1 usb2 at uhci1: USB revision 1.0 uhub2 at usb2 Intel UHCI root hub rev 1.00/1.00 addr 1 usb3 at uhci2: USB revision 1.0 uhub3 at usb3 Intel UHCI root hub rev 1.00/1.00 addr 1 usb4 at uhci3: USB revision 1.0
acpiec/acpitz problems on asus eeepc 1005PX
On asus eeepc 1005PX acpiec fails to load, so a lot of acpi-related stuff fails. Most notably I have to disable acpitz to use the computer, but acpibat does not work and (un)plugging the AC adapter cause a hard reboot. Also, I have a lot of splassert: assertwaitok: want -1 have 1 when dhclient tries to get an IP without cable plugged. acpidump, full dmesg available at http://dargor.servebeer.com/~dargor/openbsd/1005PX/1005PX.tgz Everything else (X, sound, network and wifi) works fine. OpenBSD 4.9-beta (GENERIC.MP) #780: Thu Jan 20 17:21:34 MST 2011 t...@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP real mem = 1062797312 (1013MB) avail mem = 1020477440 (973MB) mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.6 @ 0xf0760 (31 entries) bios0: vendor American Megatrends Inc. version 0904 date 08/12/2010 bios0: ASUSTeK Computer INC. 1005PX acpi0 at bios0: rev 2 acpi0: sleep states S0 S3 S4 S5 acpi0: tables DSDT FACP APIC MCFG ECDT OEMB HPET GSCI SSDT SLIC acpi0: wakeup devices P0P1(S4) P0P4(S4) P0P5(S4) P0P6(S4) P0P7(S4) acpitimer0 at acpi0: 3579545 Hz, 24 bits acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: Intel(R) Atom(TM) CPU N450 @ 1.66GHz, 1666.72 MHz cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,EST,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE,NXE,LONG cpu0: 512KB 64b/line 8-way L2 cache cpu0: apic clock running at 166MHz cpu1 at mainbus0: apid 1 (application processor) cpu1: Intel(R) Atom(TM) CPU N450 @ 1.66GHz, 1666.48 MHz cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,EST,TM2,SSSE3,CX16,xTPR,PDCM,MOVBE,NXE,LONG cpu1: 512KB 64b/line 8-way L2 cache ioapic0 at mainbus0: apid 2 pa 0xfec0, version 20, 24 pins ioapic0: misconfigured as apic 1, remapped to apid 2 acpimcfg0 at acpi0 addr 0xe000, bus 0-255 acpiec0 at acpi0acpiec _REG failed, broken BIOS acpihpet0 at acpi0: 14318179 Hz acpiprt0 at acpi0: bus 0 (PCI0) acpiprt1 at acpi0: bus 4 (P0P4) acpiprt2 at acpi0: bus 2 (P0P5) acpiprt3 at acpi0: bus -1 (P0P6) acpiprt4 at acpi0: bus 1 (P0P7) acpiec at acpi0 not configured acpicpu0 at acpi0: C3, C2, C1, PSS acpicpu1 at acpi0: C3, C2, C1, PSS acpitz at acpi0 not configured acpibat0 at acpi0: BAT0 model 1001PX serial type LION oem ASUS acpiac0 at acpi0: AC unit offline acpiasus0 at acpi0 acpibtn0 at acpi0: LID_ acpibtn1 at acpi0: SLPB acpibtn2 at acpi0: PWRB acpivideo0 at acpi0: VGA_ acpivout0 at acpivideo0: CRTD acpivout1 at acpivideo0: TVOD acpivout2 at acpivideo0: LCDD cpu0: Enhanced SpeedStep 1666 MHz: speeds: 1667, 1333, 1000 MHz pci0 at mainbus0 bus 0 pchb0 at pci0 dev 0 function 0 Intel Pineview DMI rev 0x00 vga1 at pci0 dev 2 function 0 Intel Pineview Video rev 0x00 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) intagp0 at vga1 agp0 at intagp0: aperture at 0xd000, size 0x1000 inteldrm0 at vga1: apic 2 int 16 (irq 15) drm0 at inteldrm0 Intel Pineview Video rev 0x00 at pci0 dev 2 function 1 not configured azalia0 at pci0 dev 27 function 0 Intel 82801GB HD Audio rev 0x02: apic 2 int 22 (irq 4) azalia0: codecs: Realtek ALC269 audio0 at azalia0 ppb0 at pci0 dev 28 function 0 Intel 82801GB PCIE rev 0x02: apic 2 int 16 (irq 15) pci1 at ppb0 bus 4 ppb1 at pci0 dev 28 function 1 Intel 82801GB PCIE rev 0x02: apic 2 int 17 (irq 10) pci2 at ppb1 bus 2 athn0 at pci2 dev 0 function 0 Atheros AR2427 rev 0x01: apic 2 int 17 (irq 10) athn0: AR9285 rev 2 (1T1R), ROM rev 13, address 48:5d:60:24:0f:2b ppb2 at pci0 dev 28 function 3 Intel 82801GB PCIE rev 0x02: apic 2 int 19 (irq 11) pci3 at ppb2 bus 1 alc0 at pci3 dev 0 function 0 Attansic Technology L2C rev 0xc0: apic 2 int 19 (irq 11), address 20:cf:30:70:8f:31 atphy0 at alc0 phy 0: F1 10/100/1000 PHY, rev. 11 uhci0 at pci0 dev 29 function 0 Intel 82801GB USB rev 0x02: apic 2 int 23 (irq 3) uhci1 at pci0 dev 29 function 1 Intel 82801GB USB rev 0x02: apic 2 int 19 (irq 11) uhci2 at pci0 dev 29 function 2 Intel 82801GB USB rev 0x02: apic 2 int 18 (irq 7) uhci3 at pci0 dev 29 function 3 Intel 82801GB USB rev 0x02: apic 2 int 16 (irq 15) ehci0 at pci0 dev 29 function 7 Intel 82801GB USB rev 0x02: apic 2 int 23 (irq 3) usb0 at ehci0: USB revision 2.0 uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1 ppb3 at pci0 dev 30 function 0 Intel 82801BAM Hub-to-PCI rev 0xe2 pci4 at ppb3 bus 5 pcib0 at pci0 dev 31 function 0 Intel Tigerpoint LPC rev 0x02 ahci0 at pci0 dev 31 function 2 Intel 82801GR AHCI rev 0x02: apic 2 int 21 (irq 5), AHCI 1.1 scsibus0 at ahci0: 32 targets sd0 at scsibus0 targ 0 lun 0:ATA, WDC WD2500BEVT-8, 01.0 SCSI3 0/direct fixed sd0: 238475MB, 512 bytes/sec, 488397168 sec total ichiic0 at pci0 dev 31 function 3 Intel 82801GB SMBus rev 0x02: apic 2 int 21 (irq 11) iic0 at ichiic0 spdmem0 at iic0 addr 0x50: 1GB DDR2
Re: wd0 read timeouts - how to proceed?
On 12/24/10 17:09, Chris Smith wrote: On Fri, Dec 24, 2010 at 5:00 AM, Webchargewebcha...@gmx.net wrote: Is this the actual disk or the controller/other hardware? If the hardware is smart aware installing smartmontools and running smartctl may give you a clue. atactl(8) works just fine.
Re: PF and States
On 12/20/10 15:52, Kevin Wilcox wrote: On 19 December 2010 07:16, Henning Brauerlists-open...@bsws.de wrote: you're way off ;) I had 2 million during a DDoS. things got a bit slow but everything worked. Henning - out of curiosity, what were the specs on that hardware? It may be interesting to know of any specifics tweaks in that setup (besides net.inet.ip.ifq.maxlen and set limit states), if any. My understanding was that pf won't use more than 1GB of RAM, which I thought to equal about 1 million states, but I never verified that information and now it's been so long I can't recall the source. According to pf_var.h, a struct pf_state is roughly 212 bytes on amd64.
rdr-to counters, carpnodes
Hi,
I have a cluster of two pf firewalls running 4.8-current (GENERIC.MP)
#382, using rdr-to to loadbalance traffic to some web servers. I have to
keep a trace of packets and bytes each server get. I tried to
enable counters on the table I use for my redirect rule but this does
not work, is this normal ? Is there another way to achieve this ?
Relevant part of pf.conf :
table servers counters { ipA ipB ipC }
pass in quick proto tcp to $web_carp port 80 rdr-to servers port 80
# pfctl -vvsT
--a-r-C servers
Addresses: 10
Cleared: Mon Sep 13 17:30:41 2010
References: [ Anchors: 0 Rules: 1 ]
Evaluations: [ NoMatch: 0 Match: 12538461 ]
In/Block:[ Packets: 0 Bytes: 0 ]
In/Pass: [ Packets: 0 Bytes: 0 ]
In/XPass:[ Packets: 0 Bytes: 0 ]
Out/Block: [ Packets: 0 Bytes: 0 ]
Out/Pass:[ Packets: 0 Bytes: 0 ]
Out/XPass: [ Packets: 0 Bytes: 0 ]
Counters works fine on out rules, though.
Unrelated but while I am on it, does someone have a working
master/master setup ? When I change my hostname.carp* files to set
carpnodes instead of vhid/advskew only one firewall seems to work, 50%
of the traffic goes to /dev/null. Everything works fine with only one
firewall up, or with both firewalls in master/slave mode.
fwA: vhid 1 - carpnodes 1:0,2:100
fwB: vhid 2 advskew 100 - carpnodes 1:100,2:0
Tried all balancing ip modes to no avail.
Re: aucat bug in 4.8-beta/i386 ? (no more read tickets)
aucat -d -d -d -d -d : [snip a lot of output when ok] mix(play): in mix(play): used = 1004/23296, done = 6848/6848 rsock(sock)=mix(play): fill blocked (inuse) rsock(sock)=mix(play): badd: done = 6848/6848, drop = 0 mix(play)-wsio(default): bzero(7852) rsock(sock)=mix(play): discard(1004) rsock(sock)=mix(play): badd: done = 7852/7852 mix(play): maxwrite = 11648 - 11648 = 0 mix(play): in mix(play): used = 0/23296, done = 7852/7852 rsock(sock): in mplayer0/run|rdat|widl: reading 20 todo sock: read 80 bytes in 2us rsock(sock)-mix(play): commit(20) mix(play): in mix(play): used = 20/23296, done = 7852/7852 rsock(sock)=mix(play): fill blocked (inuse) rsock(sock)=mix(play): badd: done = 7852/7852, drop = 0 mix(play)-wsio(default): bzero(7872) rsock(sock)=mix(play): discard(20) rsock(sock)=mix(play): badd: done = 7872/7872 mix(play): maxwrite = 11648 -poll: sock(sock|w) listen(/tmp/aucat-1000/softaudio0|) sio(default|) pfds[] = 1 1 5 sio(default|): rok rsio(default): in sio(default|rR): no more read tickets poll: sock(sock|w) listen(/tmp/aucat-1000/softaudio0|) sio(default|) pfds[] = 1 1 5 sio(default|): rok rsio(default): in sio(default|rR): no more read tickets poll: sock(sock|w) listen(/tmp/aucat-1000/softaudio0|) sio(default|) pfds[] = 1 1 5 sio(default|): rok rsio(default): in sio(default|rR): no more read tickets poll: sock(sock|w) listen(/tmp/aucat-1000/softaudio0|) sio(default|) pfds[] = 1 1 5 sio(default|): rok rsio(default): in sio(default|rR): no more read tickets poll: sock(sock|w) listen(/tmp/aucat-1000/softaudio0|) sio(default|) pfds[] = 1 1 5 sio(default|): rok rsio(default): in sio(default|rR): no more read tickets poll: sock(sock|w) listen(/tmp/aucat-1000/softaudio0|) sio(default|) pfds[] = 1 1 5 sio(default|): rok rsio(default): in sio(default|rR): no more read tickets poll: sock(sock|w) listen(/tmp/aucat-1000/softaudio0|) sio(default|) pfds[] = 1 1 5 sio(default|): rok rsio(default): in sio(default|rR): no more read tickets poll: sock(sock|w) listen(/tmp/aucat-1000/softaudio0|) sio(default|) pfds[] = 1 1 5 sio(default|): rok rsio(default): in sio(default|rR): no more read tickets poll: sock(sock|w) listen(/tmp/aucat-1000/softaudio0|) sio(default|) pfds[] = 1 1 5 sio(default|): rok rsio(default): in sio(default|rR): no more read tickets poll: sock(sock|w) listen(/tmp/aucat-1000/softaudio0|) sio(default|) pfds[] = 1 1 5 sio(default|): rok rsio(default): in sio(default|rR): no more read tickets poll: sock(sock|w) listen(/tmp/aucat-1000/softaudio0|) sio(default|) pfds[] = 1 1 5 sio(default|): rok rsio(default): in sio(default|rR): no more read tickets poll: sock(sock|w) listen(/tmp/aucat-1000/softaudio0|) sio(default|) pfds[] = 1 1 5 sio(default|): rok rsio(default): in sio(default|rR): no more read tickets poll: sock(sock|w) listen(/tmp/aucat-1000/softaudio0|) sio(default|) pfds[] = 1 1 5 sio(default|): rok rsio(default): in sio(default|rR): no more read tickets poll: sock(sock|w) listen(/tmp/aucat-1000/softaudio0|) sio(default|) pfds[] = 1 1 5 sio(default|): rok rsio(default): in sio(default|rR): no more read tickets poll: sock(sock|w) listen(/tmp/aucat-1000/softaudio0|) sio(default|) pfds[] = 1 1 5 sio(default|): rok rsio(default): in sio(default|rR): no more read tickets poll: sock(sock|w) listen(/tmp/aucat-1000/softaudio0|) sio(default|) pfds[] = 1 1 5 sio(default|): rok rsio(default): in sio(default|rR): no more read tickets poll: sock(sock|w) listen(/tmp/aucat-1000/softaudio0|) sio(default|) pfds[] = 1 1 5 sio(default|): rok rsio(default): in sio(default|rR): no more read tickets poll: sock(sock|w) listen(/tmp/aucat-1000/softaudio0|) sio(default|) pfds[] = 1 1 5 sio(default|): rok rsio(default): in sio(default|rR): no more read tickets poll: sock(sock|w) listen(/tmp/aucat-1000/softaudio0|) sio(default|) pfds[] = 1 1 5 sio(default|): rok rsio(default): in sio(default|rR): no more read tickets poll: sock(sock|w) listen(/tmp/aucat-1000/softaudio0|) sio(default|) pfds[] = 1 1 5 sio(default|): rok rsio(default): in sio(default|rR): no more read tickets poll: sock(sock|w) listen(/tmp/aucat-1000/softaudio0|) sio(default|) pfds[] = 1 1 5 sio(default|): busy loop, disconnecting sio(default|): disconnected sio(default|eh): eof rsio(default): eof rsio(default): terminating... rsio(default): done rsio(default)-sub(rec): eof requested sub(rec): in sub(rec): eof sub(rec): terminating... sub(rec): free delayed wsio(default): terminating... wsio(default): done mix(play)-wsio(default): hup requested mix(play): hup mix(play): terminating... rsock(sock)-mix(play): hup requested rsock(sock): hup rsock(sock): terminating... rsock(sock): done mplayer0/ini|rmsg|widl: freeing buffers wsock(sock): terminating... wsock(sock): done wsock(sock): freed sock(sock|w): terminating... sock(sock|w): destroyed device released rsock(sock): freed mix(play): free delayed sio(default|Reh): terminating... wsio(default): free delayed rsio(default): free delayed sio(default|hZ): terminating... sio(default|hZ): destroyed
aucat bug in 4.8-beta/i386 ?
Hi, Mplayer hangs when playing music. After some search I found aucat was exiting, leaving mplayer alone. There are also a lot of cracks/pops in the audio stream (using headphones), this happens with and without aucat running. Without aucat the sound is total garbage after some time, this was previously caused by interrupt storms but nothing this time... vmstat -i : interrupt total rate irq0/clock 787366 199 irq0/ipi 1103407 279 irq80/inteldrm0 165974 irq96/em0 179316 45 irq81/uhci1 337088 irq83/ehci0 20 irq80/azalia0 95028 24 irq81/uhci3 105442 irq82/uhci4290 irq84/ehci1230 irq82/ahci0 301537 Total 2256173 570 aucat -d -d -d -d (normal use : aucat -l, takes some time to break) : sio(default|): created default: recording s16le,0:1,44100 default: playing s16le,0:1,44100 mix(play): newin, will use 11648 default: block size is 2912 frames, using 4 blocks defa...@default: rec=0:1 play=0:1 vol=32768 listen(/tmp/aucat-1000/softaudio0|): created sock(sock|): created sock/hel|rmsg|widl: HELLO message sock/hel|rmsg|widl: hello from mplayer, proto = 1, ver 3 default: option found device requested ctl(ctl): new control name is mplayer0 ctl(ctl): overwritten slot 0 sock/hel|rmsg|widl: no read buffer to set volume yet mplayer0(127)/off: changing volume to 127 mplayer0/ini|rmsg|widl: SETPAR message mplayer0/ini|rmsg|widl: using 16bits, 2 bytes per sample mplayer0/ini|rmsg|widl: using playback channels 0..1 mplayer0/ini|rmsg|widl: using 44100Hz sample rate, 2912 fr block size mplayer0/ini|rmsg|widl: using 11648 buffer size mplayer0: buffer size = 11648, play = s16le,0:1,44100 mplayer0/ini|rmsg|widl: GETPAR message mplayer0/ini|rret|widl: RRET done mplayer0/ini|rmsg|widl: GETPAR message mplayer0/ini|rret|widl: RRET done mplayer0/ini|rmsg|widl: GETPAR message mplayer0/ini|rret|widl: RRET done mplayer0/ini|rmsg|widl: START message mplayer0/sta|rmsg|widl: allocating 11648/23296 fr buffers, rmax = 93184 mplayer0/run|rmsg|widl: attaching at 0 rsock(sock)-mix(play): setmaster: 32768/32768 syncing device, mix(play): todo = 0: lat = 0, sub(rec): lat = 0 rsock(sock)-mix(play): setting volume to 32768 starting device sio(default|): started (at this point aucat exits without being asked to) sio(default|): busy loop, disconnecting sio(default|): disconnected sio(default|eh): eof rsio(default): eof rsio(default): terminating... rsio(default): done rsio(default)-sub(rec): eof requested sub(rec): terminating... sub(rec): free delayed wsio(default): terminating... wsio(default): done mix(play)-wsio(default): hup requested mix(play): hup mix(play): terminating... rsock(sock)-mix(play): hup requested rsock(sock): hup rsock(sock): terminating... rsock(sock): done mplayer0/ini|rmsg|widl: freeing buffers wsock(sock): terminating... wsock(sock): done wsock(sock): freed sock(sock|w): terminating... sock(sock|w): destroyed device released rsock(sock): freed mix(play): free delayed sio(default|Reh): terminating... wsio(default): free delayed rsio(default): free delayed sio(default|hZ): terminating... sio(default|hZ): destroyed sio(default|hZ): stopped device disappeared closing device ctl(ctl): terminating... ctl(ctl): done ctl(ctl): free delayed zomb(play): freed zomb(default): freed zomb(rec): freed zomb(default): freed zomb(ctl): freed listen(/tmp/aucat-1000/softaudio0|): closing listen(/tmp/aucat-1000/softaudio0|Z): terminating... listen(/tmp/aucat-1000/softaudio0|Z): destroyed nothing to do... aucat -d -d -d -d -r 48000 -b 480 -z 240 (these parameters seems to break aucat quickly) : sio(default|): created default: recording s16le,0:1,48000 default: playing s16le,0:1,48000 mix(play): newin, will use 448 default: block size is 224 frames, using 2 blocks defa...@default: rec=0:1 play=0:1 vol=32768 listen(/tmp/aucat-1000/softaudio0|): created sock(sock|): created sock/hel|rmsg|widl: HELLO message sock/hel|rmsg|widl: hello from mplayer, proto = 1, ver 3 default: option found device requested ctl(ctl): new control name is mplayer0 ctl(ctl): overwritten slot 0 sock/hel|rmsg|widl: no read buffer to set volume yet mplayer0(127)/off: changing volume to 127 mplayer0/ini|rmsg|widl: SETPAR message mplayer0/ini|rmsg|widl: using 16bits, 2 bytes per sample mplayer0/ini|rmsg|widl: using playback channels 0..1 mplayer0/ini|rmsg|widl: using 44100Hz sample rate, 206 fr block size mplayer0/ini|rmsg|widl: using 11124 buffer size mplayer0: buffer size = 11124, play = s16le,0:1,44100 mplayer0/ini|rmsg|widl: GETPAR message mplayer0/ini|rret|widl: RRET done mplayer0/ini|rmsg|widl: GETPAR message mplayer0/ini|rret|widl: RRET done mplayer0/ini|rmsg|widl: GETPAR message mplayer0/ini|rret|widl: RRET done
Re: aucat bug in 4.8-beta/i386 ? (no more read tickets)
On Tue, 3 Aug 2010 10:32:40 +0200 Alexandre Ratchov a...@caoua.org wrote: the device is spinning. Could you send a dmesg and confirm that if you run: The dmesg was in my first mail, which did not arrive yet :( I join a copy at the end of this mail. aucat -ddd -z 256 default: recording s16le,0:1,44100 default: playing s16le,0:1,44100 default: block size is 256 frames, using 46 blocks defa...@default: rec=0:1 play=0:1 vol=32768 mplayer0: buffer size = 11264, play = s16le,0:1,44100 starting device sock: wrote 40 bytes in 55860us sio(default|): busy loop, disconnecting device disappeared closing device it exits very quicky (almost as soon as a client starts playing/recording) ? It exists quickly, yes. Could you confirm that the following: aucat -ddd -z 256 -m play doesn't exit (sound quality degrades instead until the next stop/start cycle). Seems good so far, sound is unstable but aucat does not exit. dmesg : OpenBSD 4.8-beta (GENERIC.MP) #293: Sun Aug 1 22:21:46 MDT 2010 dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP RTC BIOS diagnostic error 11memory_size cpu0: Intel(R) Core(TM)2 Duo CPU E8200 @ 2.66GHz (GenuineIntel 686-class) 2.67 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1 real mem = 2101956608 (2004MB) avail mem = 2057592832 (1962MB) mainbus0 at root bios0 at mainbus0: AT/286+ BIOS, date 03/11/08, BIOS32 rev. 0 @ 0xffea0, SMBIOS rev. 2.5 @ 0xf0450 (80 entries) bios0: vendor Dell Inc. version A09 date 03/11/2008 bios0: Dell Inc. OptiPlex 755 acpi0 at bios0: rev 2 acpi0: tables DSDT FACP SSDT APIC BOOT ASF! MCFG HPET SLIC acpi0: wakeup devices VBTN(S4) PCI0(S5) PCI4(S5) PCI2(S5) PCI3(S5) PCI1(S5) PCI5(S5) PCI6(S5) MOU_(S3) USB0(S3) USB1(S3) USB2(S3) USB3(S3) USB4(S3) USB5(S3) acpitimer0 at acpi0: 3579545 Hz, 24 bits acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: apic clock running at 332MHz cpu1 at mainbus0: apid 1 (application processor) cpu1: Intel(R) Core(TM)2 Duo CPU E8200 @ 2.66GHz (GenuineIntel 686-class) 2.66 GHz cpu1: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1 ioapic0 at mainbus0: apid 8 pa 0xfec0, version 20, 24 pins ioapic0: misconfigured as apic 0, remapped to apid 8 acpihpet0 at acpi0: 14318179 Hz acpiprt0 at acpi0: bus 2 (PCI4) acpiprt1 at acpi0: bus 1 (PCI2) acpiprt2 at acpi0: bus -1 (PCI3) acpiprt3 at acpi0: bus -1 (PCI1) acpiprt4 at acpi0: bus -1 (PCI5) acpiprt5 at acpi0: bus -1 (PCI6) acpiprt6 at acpi0: bus 0 (PCI0) acpicpu0 at acpi0 acpicpu1 at acpi0 acpibtn0 at acpi0: VBTN bios0: ROM list: 0xc/0xb800! 0xcb800/0x2000! 0xcd800/0x2800! cpu0: unknown Enhanced SpeedStep CPU, msr 0x0612081f0600081f cpu0: using only highest and lowest power states cpu0: Enhanced SpeedStep 2660 MHz: speeds: 2667, 2000 MHz pci0 at mainbus0 bus 0: configuration mode 1 (bios) pchb0 at pci0 dev 0 function 0 Intel 82Q35 Host rev 0x02 vga1 at pci0 dev 2 function 0 Intel 82Q35 Video rev 0x02 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) intagp0 at vga1 agp0 at intagp0: aperture at 0xd000, size 0x1000 inteldrm0 at vga1: apic 8 int 16 (irq 11) drm0 at inteldrm0 Intel 82Q35 Video rev 0x02 at pci0 dev 2 function 1 not configured Intel 82Q35 HECI rev 0x02 at pci0 dev 3 function 0 not configured pciide0 at pci0 dev 3 function 2 Intel 82Q35 PT IDER rev 0x02: DMA (unsupported), channel 0 wired to native-PCI, channel 1 wired to native-PCI pciide0: using apic 8 int 18 (irq 9) for native-PCI interrupt pciide0: channel 0 ignored (not responding; disabled or no drives?) pciide0: channel 1 ignored (not responding; disabled or no drives?) Intel 82Q35 KT rev 0x02 at pci0 dev 3 function 3 not configured em0 at pci0 dev 25 function 0 Intel ICH9 IGP AMT rev 0x02: apic 8 int 21 (irq 3), address 00:1e:4f:c5:11:9f uhci0 at pci0 dev 26 function 0 Intel 82801I USB rev 0x02: apic 8 int 16 (irq 11) uhci1 at pci0 dev 26 function 1 Intel 82801I USB rev 0x02: apic 8 int 17 (irq 5) ehci0 at pci0 dev 26 function 7 Intel 82801I USB rev 0x02: apic 8 int 22 (irq 5) usb0 at ehci0: USB revision 2.0 uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1 azalia0 at pci0 dev 27 function 0 Intel 82801I HD Audio rev 0x02: apic 8 int 16 (irq 11) azalia0: codecs: Analog Devices AD1984 audio0 at azalia0 ppb0 at pci0 dev 28 function 0 Intel 82801I PCIE rev 0x02: apic 8 int 16 (irq 11) pci1 at ppb0 bus 1 uhci2 at pci0 dev 29 function 0 Intel 82801I USB rev 0x02: apic 8 int 23 (irq 10) uhci3 at pci0 dev 29 function 1 Intel 82801I USB rev 0x02: apic 8 int 17 (irq 5) uhci4 at pci0 dev 29 function 2 Intel 82801I USB rev 0x02: apic 8 int 18 (irq 9) ehci1 at pci0 dev 29
Re: aucat bug in 4.8-beta/i386 ? (no more read tickets)
On Tue, 3 Aug 2010 11:21:02 +0200 Alexandre Ratchov a...@caoua.org wrote: does aucat exit if X is not running? and if you boot the GENERIC kernel? and if you neither use X, nor MP ? GENERIC.MP, X not running : aucat works (tried ~2 hours) GENERIC, X running : aucat works, so far (30 minutes right now) I did not try GENERIC without X, I need X to work :) dmesg (GENERIC) : OpenBSD 4.8-beta (GENERIC) #59: Sun Aug 1 22:11:49 MDT 2010 dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC RTC BIOS diagnostic error 11memory_size cpu0: Intel(R) Core(TM)2 Duo CPU E8200 @ 2.66GHz (GenuineIntel 686-class) 2.67 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1 real mem = 2101956608 (2004MB) avail mem = 2057609216 (1962MB) mainbus0 at root bios0 at mainbus0: AT/286+ BIOS, date 03/11/08, BIOS32 rev. 0 @ 0xffea0, SMBIOS rev. 2.5 @ 0xf0450 (80 entries) bios0: vendor Dell Inc. version A09 date 03/11/2008 bios0: Dell Inc. OptiPlex 755 acpi0 at bios0: rev 2 acpi0: tables DSDT FACP SSDT APIC BOOT ASF! MCFG HPET SLIC acpi0: wakeup devices VBTN(S4) PCI0(S5) PCI4(S5) PCI2(S5) PCI3(S5) PCI1(S5) PCI5(S5) PCI6(S5) MOU_(S3) USB0(S3) USB1(S3) USB2(S3) USB3(S3) USB4(S3) USB5(S3) acpitimer0 at acpi0: 3579545 Hz, 24 bits acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: apic clock running at 332MHz cpu at mainbus0: not configured ioapic0 at mainbus0: apid 8 pa 0xfec0, version 20, 24 pins ioapic0: misconfigured as apic 0, remapped to apid 8 acpihpet0 at acpi0: 14318179 Hz acpiprt0 at acpi0: bus 2 (PCI4) acpiprt1 at acpi0: bus 1 (PCI2) acpiprt2 at acpi0: bus -1 (PCI3) acpiprt3 at acpi0: bus -1 (PCI1) acpiprt4 at acpi0: bus -1 (PCI5) acpiprt5 at acpi0: bus -1 (PCI6) acpiprt6 at acpi0: bus 0 (PCI0) acpicpu0 at acpi0 acpibtn0 at acpi0: VBTN bios0: ROM list: 0xc/0xb800! 0xcb800/0x2000! 0xcd800/0x2800! cpu0: unknown Enhanced SpeedStep CPU, msr 0x0612081f0600081f cpu0: using only highest and lowest power states cpu0: Enhanced SpeedStep 2661 MHz: speeds: 2667, 2000 MHz pci0 at mainbus0 bus 0: configuration mode 1 (bios) pchb0 at pci0 dev 0 function 0 Intel 82Q35 Host rev 0x02 vga1 at pci0 dev 2 function 0 Intel 82Q35 Video rev 0x02 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) intagp0 at vga1 agp0 at intagp0: aperture at 0xd000, size 0x1000 inteldrm0 at vga1: apic 8 int 16 (irq 11) drm0 at inteldrm0 Intel 82Q35 Video rev 0x02 at pci0 dev 2 function 1 not configured Intel 82Q35 HECI rev 0x02 at pci0 dev 3 function 0 not configured pciide0 at pci0 dev 3 function 2 Intel 82Q35 PT IDER rev 0x02: DMA (unsupported), channel 0 wired to native-PCI, channel 1 wired to native-PCI pciide0: using apic 8 int 18 (irq 9) for native-PCI interrupt pciide0: channel 0 ignored (not responding; disabled or no drives?) pciide0: channel 1 ignored (not responding; disabled or no drives?) Intel 82Q35 KT rev 0x02 at pci0 dev 3 function 3 not configured em0 at pci0 dev 25 function 0 Intel ICH9 IGP AMT rev 0x02: apic 8 int 21 (irq 3), address 00:1e:4f:c5:11:9f uhci0 at pci0 dev 26 function 0 Intel 82801I USB rev 0x02: apic 8 int 16 (irq 11) uhci1 at pci0 dev 26 function 1 Intel 82801I USB rev 0x02: apic 8 int 17 (irq 5) ehci0 at pci0 dev 26 function 7 Intel 82801I USB rev 0x02: apic 8 int 22 (irq 5) usb0 at ehci0: USB revision 2.0 uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1 azalia0 at pci0 dev 27 function 0 Intel 82801I HD Audio rev 0x02: apic 8 int 16 (irq 11) azalia0: codecs: Analog Devices AD1984 audio0 at azalia0 ppb0 at pci0 dev 28 function 0 Intel 82801I PCIE rev 0x02: apic 8 int 16 (irq 11) pci1 at ppb0 bus 1 uhci2 at pci0 dev 29 function 0 Intel 82801I USB rev 0x02: apic 8 int 23 (irq 10) uhci3 at pci0 dev 29 function 1 Intel 82801I USB rev 0x02: apic 8 int 17 (irq 5) uhci4 at pci0 dev 29 function 2 Intel 82801I USB rev 0x02: apic 8 int 18 (irq 9) ehci1 at pci0 dev 29 function 7 Intel 82801I USB rev 0x02: apic 8 int 23 (irq 10) usb1 at ehci1: USB revision 2.0 uhub1 at usb1 Intel EHCI root hub rev 2.00/1.00 addr 1 ppb1 at pci0 dev 30 function 0 Intel 82801BA Hub-to-PCI rev 0x92 pci2 at ppb1 bus 2 ichpcib0 at pci0 dev 31 function 0 Intel 82801IO LPC rev 0x02: PM disabled ahci0 at pci0 dev 31 function 2 Intel 82801I AHCI rev 0x02: apic 8 int 18 (irq 9), AHCI 1.2 ahci0: PHY offline on port 2 ahci0: PHY offline on port 3 ahci0: PHY offline on port 5 scsibus0 at ahci0: 32 targets sd0 at scsibus0 targ 0 lun 0: ATA, ST3250310AS, 3.AD SCSI3 0/direct fixed sd0: 238418MB, 512 bytes/sec, 488281250 sec total cd0 at scsibus0 targ 1 lun 0: TSSTcorp, DVD+-RW TS-H653B, D300 ATAPI 5/cdrom removable ichiic0 at pci0 dev 31 function 3 Intel 82801I SMBus rev 0x02: apic 8 int 18 (irq 9) iic0 at ichiic0 spdmem0 at iic0 addr 0x50: 1GB DDR2 SDRAM non-parity
Re: One LAN, two ISPs, route-to and sticky-address
On Thu, 22 Apr 2010 17:23:53 +0200
Gabriel Linder lin...@jeuxvideo.com wrote:
Hi,
I have two ISPs and a LAN. I need to load balance outgoing connections
from the LAN between the ISPs.
My router is running OpenBSD 4.6-stable, up-to-date.
-
| |
ISP 1 ---(isp1 box)---+-ext1_if |
| |
|int_if-+--- LAN
| |
ISP 2 ---(isp2 box)---+-ext2_if |
| |
-
OpenBSD
int_if - interface to LAN
int_net - 192.168.0.0/24
ext1_if - interface to ISP 1 (192.168.1.2)
ext1_gw - ISP 1 gateway (192.168.1.1)
ext2_if - interface to ISP 2 (192.168.2.2)
ext2_gw - ISP 2 gateway (192.168.2.1)
There is no default route (empty /etc/mygate).
Following http://www.openbsd.org/faq/pf/pools.html#outgoing I ended up
with the following :
---sysctl.conf---
net.inet.ip.forwarding=1
---sysctl.conf---
---pf.conf---
set debug loud
set block-policy return
#set optimization aggressive
#set timeout src.track 300
set skip on lo
nat log on $ext1_if from $int_net - ($ext1_if)
nat log on $ext2_if from $int_net - ($ext2_if)
block log
pass in log on $int_if route-to \
{ ($ext1_if $ext1_gw), ($ext2_if $ext2_gw) } \
from $int_net
pass in log on $int_if from $int_net to $int_if
pass out log
pass out log on $ext1_if route-to ($ext2_if $ext2_gw) from $ext2_if
pass out log on $ext2_if route-to ($ext1_if $ext1_gw) from $ext1_if
---pf.conf---
Everything works fine with this setup but https and some ftp servers
are very sensitive to IP changes, so I did add sticky-address to bind
a connection to an ISP and fix this issue :
pass in log on $int_if route-to \
{ ($ext1_if $ext1_gw), ($ext2_if $ext2_gw) } sticky-address \
from $int_net
This works when only one PC open a connection. When another PC open
a connection the first one has no longer access to the internet. After
some time in tcpdump and /var/log/messages, it seems because packets
are routed to the wrong interface.
/var/log/messages analysis :
192.168.0.78 tries a connection :
/bsd: pf_map_addr: selected address 192.168.2.1
/bsd: pf_map_addr: selected address 192.168.2.2
/bsd: pf_map_addr: src tracking maps 192.168.0.78 to 192.168.2.1
/bsd: pf_map_addr: src tracking maps 192.168.0.78 to 192.168.2.2
/bsd: pf_map_addr: src tracking maps 192.168.0.78 to 192.168.2.1
/bsd: pf_map_addr: src tracking maps 192.168.0.78 to 192.168.2.2
Looks ok, now 192.168.0.29 tries a connection too :
/bsd: pf_map_addr: selected address 192.168.1.1
/bsd: pf_map_addr: selected address 192.168.1.2
/bsd: pf_map_addr: src tracking maps 192.168.0.29 to 192.168.1.1
/bsd: pf_map_addr: src tracking maps 192.168.0.29 to 192.168.1.2
/bsd: pf_map_addr: src tracking maps 192.168.0.29 to 192.168.1.1
/bsd: pf_map_addr: src tracking maps 192.168.0.29 to 192.168.1.2
Looks good, now 192.168.0.78 retries a connection :
/bsd: pf_map_addr: src tracking maps 192.168.0.78 to 192.168.2.1
/bsd: pf_map_addr: selected address 192.168.1.2
[and that's all]
This is confirmed by tcpdump (on pflog0, bge0, em0 and em1) : the
packets are routed to the wrong interface. Three SYN are sent, then
client bail out. Tests were quickly done, so there is no state/track
timeout here.
Is there something I am doing wrong ?
Tried with a recent snapshot of -current, same problem but now the
sticky-address option is simply ignored (confirmed with pfctl
-vf /etc/pf.conf : only round-robin, no sticky-address). Nobody has a
clue for this ?
pf.conf says :
pass in log on $int_if from $int_net route-to { ($ext1_if $ext1_gw), ($ext2_if
$ext2_gw) } sticky-address
but pfctl -vf says :
pass in log on bge0 inet from 192.168.0.0/24 to any flags S/SA keep state
route-to __automatic_6c41d1cd_0 round-robin
OpenBSD 4.7-current (GENERIC.MP) #0: Mon May 24 18:25:54 MDT 2010
dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP
One LAN, two ISPs, route-to and sticky-address
Hi,
I have two ISPs and a LAN. I need to load balance outgoing connections
from the LAN between the ISPs.
My router is running OpenBSD 4.6-stable, up-to-date.
-
| |
ISP 1 ---(isp1 box)---+-ext1_if |
| |
|int_if-+--- LAN
| |
ISP 2 ---(isp2 box)---+-ext2_if |
| |
-
OpenBSD
int_if - interface to LAN
int_net - 192.168.0.0/24
ext1_if - interface to ISP 1 (192.168.1.2)
ext1_gw - ISP 1 gateway (192.168.1.1)
ext2_if - interface to ISP 2 (192.168.2.2)
ext2_gw - ISP 2 gateway (192.168.2.1)
There is no default route (empty /etc/mygate).
Following http://www.openbsd.org/faq/pf/pools.html#outgoing I ended up
with the following :
---sysctl.conf---
net.inet.ip.forwarding=1
---sysctl.conf---
---pf.conf---
set debug loud
set block-policy return
#set optimization aggressive
#set timeout src.track 300
set skip on lo
nat log on $ext1_if from $int_net - ($ext1_if)
nat log on $ext2_if from $int_net - ($ext2_if)
block log
pass in log on $int_if route-to \
{ ($ext1_if $ext1_gw), ($ext2_if $ext2_gw) } \
from $int_net
pass in log on $int_if from $int_net to $int_if
pass out log
pass out log on $ext1_if route-to ($ext2_if $ext2_gw) from $ext2_if
pass out log on $ext2_if route-to ($ext1_if $ext1_gw) from $ext1_if
---pf.conf---
Everything works fine with this setup but https and some ftp servers are
very sensitive to IP changes, so I did add sticky-address to bind a
connection to an ISP and fix this issue :
pass in log on $int_if route-to \
{ ($ext1_if $ext1_gw), ($ext2_if $ext2_gw) } sticky-address \
from $int_net
This works when only one PC open a connection. When another PC open
a connection the first one has no longer access to the internet. After
some time in tcpdump and /var/log/messages, it seems because packets
are routed to the wrong interface.
/var/log/messages analysis :
192.168.0.78 tries a connection :
/bsd: pf_map_addr: selected address 192.168.2.1
/bsd: pf_map_addr: selected address 192.168.2.2
/bsd: pf_map_addr: src tracking maps 192.168.0.78 to 192.168.2.1
/bsd: pf_map_addr: src tracking maps 192.168.0.78 to 192.168.2.2
/bsd: pf_map_addr: src tracking maps 192.168.0.78 to 192.168.2.1
/bsd: pf_map_addr: src tracking maps 192.168.0.78 to 192.168.2.2
Looks ok, now 192.168.0.29 tries a connection too :
/bsd: pf_map_addr: selected address 192.168.1.1
/bsd: pf_map_addr: selected address 192.168.1.2
/bsd: pf_map_addr: src tracking maps 192.168.0.29 to 192.168.1.1
/bsd: pf_map_addr: src tracking maps 192.168.0.29 to 192.168.1.2
/bsd: pf_map_addr: src tracking maps 192.168.0.29 to 192.168.1.1
/bsd: pf_map_addr: src tracking maps 192.168.0.29 to 192.168.1.2
Looks good, now 192.168.0.78 retries a connection :
/bsd: pf_map_addr: src tracking maps 192.168.0.78 to 192.168.2.1
/bsd: pf_map_addr: selected address 192.168.1.2
[and that's all]
This is confirmed by tcpdump (on pflog0, bge0, em0 and em1) : the
packets are routed to the wrong interface. Three SYN are sent, then
client bail out. Tests were quickly done, so there is no state/track
timeout here.
Is there something I am doing wrong ?
Re: Acer Aspire One freeze with Atheros AR5424 on OpenBSD 4.5
On Mon, 16 Mar 2009 13:25:55 -0400 Nick Holland n...@holland-consulting.net wrote: Alvaro Mantilla Gimenez wrote: Hello, I send this messages to b...@openbsd.org a few days ago. I don't know if this is the all the information the developers need. Anyway I would like to create this thread just for search purposes...may be there is more people with the same problem. I found a previous thread about this but it seems nobody talk about the channel problem. ath0 on the Acer Aspire One is known to not work (unless something happened when I wasn't looking). it's a new variant on an undocumented chip. It seems that FreeBSD now has support for it : http://marc.info/?l=freebsd-stablem=123687550928068w=2 AH5424 does not exist, so I assume it's a typo that should be read AR5424.
Re: High interrupt count on OpenBSD 4.3/amd64 with driver azalia
On Thu, 28 Aug 2008 10:49:48 +0200 Gabriel Linder [EMAIL PROTECTED] wrote: Hi, I use a desktop system powered by OpenBSD 4.3-stable with GENERIC.MP kernel (amd64, up to date as of now). I listen music with mplayer while I work, and sometime my system feel very slow. A top show that CPU0 is spending 80% time in interrupts, and leaving mplayer calm the system down. Is there anything I can do to avoid that, or any information I can provide to help fix it ? Just tried with a GENERIC kernel, which froze the system after ten minutes of uptime. Dmesg extracted from /var/log/messages follows. I will try with -current as soon as I can. Sep 3 08:52:04 oblivion syslogd: start Sep 3 08:52:04 oblivion /bsd: OpenBSD 4.3-stable (bsd) #3: Tue Sep 2 14:19:19 CEST 2008 Sep 3 08:52:04 oblivion /bsd: [EMAIL PROTECTED]:/root/bsd Sep 3 08:52:04 oblivion /bsd: real mem = 2111426560 (2013MB) Sep 3 08:52:04 oblivion /bsd: avail mem = 2038685696 (1944MB) Sep 3 08:52:04 oblivion /bsd: RTC BIOS diagnostic error 11memory_size Sep 3 08:52:04 oblivion /bsd: mainbus0 at root Sep 3 08:52:04 oblivion /bsd: bios0 at mainbus0: SMBIOS rev. 2.5 @ 0xf0450 (80 entries) Sep 3 08:52:04 oblivion /bsd: bios0: vendor Dell Inc. version A09 date 03/11/2008 Sep 3 08:52:04 oblivion /bsd: bios0: Dell Inc. OptiPlex 755 Sep 3 08:52:04 oblivion /bsd: acpi0 at bios0: rev 2 Sep 3 08:52:04 oblivion /bsd: acpi0: tables DSDT FACP SSDT APIC BOOT ASF! MCFG HPET TCPA SLIC SSDT SSDT SSDT Sep 3 08:52:04 oblivion /bsd: acpi0: wakeup devices VBTN(S4) PCI0(S5) PCI4(S5) PCI2(S5) PCI3(S5) PCI1(S5) PCI5(S5) PCI6(S5) MOU_(S3) USB0(S3) USB1(S3) USB2(S3) USB3(S3) USB4(S3) USB5(S3) Sep 3 08:52:04 oblivion /bsd: acpitimer0 at acpi0: 3579545 Hz, 24 bits Sep 3 08:52:04 oblivion /bsd: acpihpet0 at acpi0: 14318179 Hz Sep 3 08:52:04 oblivion /bsd: acpiprt0 at acpi0: bus 3 (PCI4) Sep 3 08:52:04 oblivion /bsd: acpiprt1 at acpi0: bus 2 (PCI2) Sep 3 08:52:04 oblivion /bsd: acpiprt2 at acpi0: bus -1 (PCI3) Sep 3 08:52:04 oblivion /bsd: acpiprt3 at acpi0: bus 1 (PCI1) Sep 3 08:52:04 oblivion /bsd: acpiprt4 at acpi0: bus -1 (PCI5) Sep 3 08:52:04 oblivion /bsd: acpiprt5 at acpi0: bus -1 (PCI6) Sep 3 08:52:04 oblivion /bsd: acpiprt6 at acpi0: bus 0 (PCI0) Sep 3 08:52:04 oblivion /bsd: acpicpu0 at acpi0: FVS, 2667, 2333, 2000 MHz Sep 3 08:52:04 oblivion /bsd: acpibtn0 at acpi0: VBTN Sep 3 08:52:04 oblivion /bsd: cpu0 at mainbus0: (uniprocessor) Sep 3 08:52:04 oblivion /bsd: cpu0: Intel(R) Core(TM)2 Duo CPU E8200 @ 2.66GHz, 2660.33 MHz Sep 3 08:52:04 oblivion /bsd: cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,CX16,xTPR,NXE,LONG Sep 3 08:52:04 oblivion /bsd: cpu0: 6MB 64b/line 16-way L2 cache Sep 3 08:52:04 oblivion /bsd: pci0 at mainbus0 bus 0: configuration mode 1 Sep 3 08:52:04 oblivion /bsd: pchb0 at pci0 dev 0 function 0 Intel 82Q35 Host rev 0x02 Sep 3 08:52:04 oblivion /bsd: ppb0 at pci0 dev 1 function 0 Intel 82Q35 PCIE rev 0x02: irq 11 Sep 3 08:52:04 oblivion /bsd: pci1 at ppb0 bus 1 Sep 3 08:52:04 oblivion /bsd: vga1 at pci1 dev 0 function 0 ATI Radeon HD 2400 XT rev 0x00 Sep 3 08:52:04 oblivion /bsd: wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) Sep 3 08:52:04 oblivion /bsd: wsdisplay0: screen 1-5 added (80x25, vt100 emulation) Sep 3 08:52:04 oblivion /bsd: Intel 82Q35 HECI rev 0x02 at pci0 dev 3 function 0 not configured Sep 3 08:52:04 oblivion /bsd: pciide0 at pci0 dev 3 function 2 Intel 82Q35 PT IDER rev 0x02: DMA (unsupported), channel 0 wired to native-PCI, channel 1 wired to native-PCI Sep 3 08:52:04 oblivion /bsd: pciide0: using irq 9 for native-PCI interrupt Sep 3 08:52:04 oblivion /bsd: pciide0: channel 0 ignored (not responding; disabled or no drives?) Sep 3 08:52:04 oblivion /bsd: pciide0: channel 1 ignored (not responding; disabled or no drives?) Sep 3 08:52:04 oblivion /bsd: Intel 82Q35 KT rev 0x02 at pci0 dev 3 function 3 not configured Sep 3 08:52:04 oblivion /bsd: em0 at pci0 dev 25 function 0 Intel ICH9 IGP AMT rev 0x02: irq 4, address 00:1e:4f:c5:11:9f Sep 3 08:52:04 oblivion /bsd: uhci0 at pci0 dev 26 function 0 Intel 82801I USB rev 0x02: irq 11 Sep 3 08:52:04 oblivion /bsd: uhci1 at pci0 dev 26 function 1 Intel 82801I USB rev 0x02: irq 5 Sep 3 08:52:04 oblivion /bsd: ehci0 at pci0 dev 26 function 7 Intel 82801I USB rev 0x02: irq 5 Sep 3 08:52:04 oblivion /bsd: usb0 at ehci0: USB revision 2.0 Sep 3 08:52:04 oblivion /bsd: uhub0 at usb0 Intel EHCI root hub rev 2.00/1.00 addr 1 Sep 3 08:52:04 oblivion /bsd: azalia0 at pci0 dev 27 function 0 Intel 82801I HD Audio rev 0x02: irq 11 Sep 3 08:52:04 oblivion /bsd: azalia0: RIRB time out Sep 3 08:52:04 oblivion /bsd: azalia0: RIRB time out Sep 3 08:52:04 oblivion /bsd: azalia0: codec[s]: Analog Devices AD1984 Sep 3 08:52:04 oblivion /bsd: audio0 at azalia0 Sep 3 08:52:04 oblivion /bsd: ppb1 at pci0 dev 28
Re: High interrupt count on OpenBSD 4.3/amd64 with driver azalia
On Wed, 3 Sep 2008 10:37:28 +0200 Ariane van der Steldt [EMAIL PROTECTED] wrote: I think the interrupt load with a -current or -snapshot will be better. I can confirm your high interrupt load (my opteron has an interrupt load hovering between 70% and 80% in GENERIC.MP). Thanks for your feedback. I am running -current for five hours now, and azalia has a normal interrupt count. OpenBSD oblivion.jeuxvideo.com 4.4 GENERIC.MP#1827 amd64
High interrupt count on OpenBSD 4.3/amd64 with driver azalia
Hi, I use a desktop system powered by OpenBSD 4.3-stable with GENERIC.MP kernel (amd64, up to date as of now). I listen music with mplayer while I work, and sometime my system feel very slow. A top show that CPU0 is spending 80% time in interrupts, and leaving mplayer calm the system down. Is there anything I can do to avoid that, or any information I can provide to help fix it ? Output of vmstat during the storm : $ vmstat -i ; date interrupt total rate irq0/clock 52831315 199 irq0/ipi 4333511 irq21/em0 20864337 irq22/ehci0 4190 irq16/azalia041947453 158 irq17/uhci31878320 irq18/uhci49042303 irq23/ehci1 3120 irq18/ahci0 2643142 10 irq1/pckbc0 88380 Total 101043325 382 Thu Aug 28 10:23:07 CEST 2008 $ vmstat -i ; date interrupt total rate irq0/clock 52832177 199 irq0/ipi 4333521 irq21/em0 20864547 irq22/ehci0 4190 irq16/azalia042571537 161 irq17/uhci31878330 irq18/uhci49042793 irq23/ehci1 3120 irq18/ahci0 2643151 10 irq1/pckbc0 88380 Total 101668352 384 Thu Aug 28 10:23:11 CEST 2008 This is 624084 interrupts for azalia0 in less than five seconds (wow). Normal rate is less than 100 interrupts for the same period of time. pcidump : 0:0:0: Intel 82Q35 Host 0:1:0: Intel 82Q35 PCIE 0:3:0: Intel 82Q35 HECI 0:3:2: Intel 82Q35 PT IDER 0:3:3: Intel 82Q35 KT 0:25:0: Intel ICH9 IGP AMT 0:26:0: Intel 82801I USB 0:26:1: Intel 82801I USB 0:26:7: Intel 82801I USB 0:27:0: Intel 82801I HD Audio 0:28:0: Intel 82801I PCIE 0:29:0: Intel 82801I USB 0:29:1: Intel 82801I USB 0:29:2: Intel 82801I USB 0:29:7: Intel 82801I USB 0:30:0: Intel 82801BA Hub-to-PCI 0:31:0: Intel 82801IO LPC 0:31:2: Intel 82801I AHCI 0:31:3: Intel 82801I SMBus 1:0:0: ATI Radeon HD 2400 XT dmesg : OpenBSD 4.3-stable (bsd) #2: Fri Jul 25 14:34:38 CEST 2008 [EMAIL PROTECTED]:/root/bsd real mem = 2111426560 (2013MB) avail mem = 2038558720 (1944MB) RTC BIOS diagnostic error 11memory_size mainbus0 at root bios0 at mainbus0: SMBIOS rev. 2.5 @ 0xf0450 (80 entries) bios0: vendor Dell Inc. version A09 date 03/11/2008 bios0: Dell Inc. OptiPlex 755 acpi0 at bios0: rev 2 acpi0: tables DSDT FACP SSDT APIC BOOT ASF! MCFG HPET TCPA SLIC SSDT SSDT SSDT acpi0: wakeup devices VBTN(S4) PCI0(S5) PCI4(S5) PCI2(S5) PCI3(S5) PCI1(S5) PCI5(S5) PCI6(S5) MOU_(S3) USB0(S3) USB1(S3) USB2(S3) USB3(S3) USB4(S3) USB5(S3) acpitimer0 at acpi0: 3579545 Hz, 24 bits acpimadt0 at acpi0 addr 0xfee0: PC-AT compat cpu0 at mainbus0: apid 0 (boot processor) cpu0: Intel(R) Core(TM)2 Duo CPU E8200 @ 2.66GHz, 2660.38 MHz cpu0: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,CX16,xTPR,NXE,LONG cpu0: 6MB 64b/line 16-way L2 cache cpu0: apic clock running at 332MHz cpu1 at mainbus0: apid 1 (application processor) cpu1: Intel(R) Core(TM)2 Duo CPU E8200 @ 2.66GHz, 2659.99 MHz cpu1: FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,SBF,SSE3,MWAIT,DS-CPL,VMX,EST,TM2,CX16,xTPR,NXE,LONG cpu1: 6MB 64b/line 16-way L2 cache ioapic0 at mainbus0 apid 8 pa 0xfec0, version 20, 24 pins ioapic0: misconfigured as apic 0, remapped to apid 8 acpihpet0 at acpi0: 14318179 Hz acpiprt0 at acpi0: bus 3 (PCI4) acpiprt1 at acpi0: bus 2 (PCI2) acpiprt2 at acpi0: bus -1 (PCI3) acpiprt3 at acpi0: bus 1 (PCI1) acpiprt4 at acpi0: bus -1 (PCI5) acpiprt5 at acpi0: bus -1 (PCI6) acpiprt6 at acpi0: bus 0 (PCI0) acpicpu0 at acpi0: FVS, 2667, 2333, 2000 MHz acpicpu1 at acpi0: FVS, 2667, 2333, 2000 MHz acpibtn0 at acpi0: VBTN pci0 at mainbus0 bus 0: configuration mode 1 pchb0 at pci0 dev 0 function 0 Intel 82Q35 Host rev 0x02 ppb0 at pci0 dev 1 function 0 Intel 82Q35 PCIE rev 0x02: apic 8 int 16 (irq 11) pci1 at ppb0 bus 1 vga1 at pci1 dev 0 function 0 ATI Radeon HD 2400 XT rev 0x00 wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) Intel 82Q35 HECI rev 0x02 at pci0 dev 3 function 0 not configured pciide0 at pci0 dev 3 function 2 Intel 82Q35 PT IDER rev 0x02: DMA (unsupported), channel 0 wired to native-PCI, channel 1 wired to native-PCI pciide0: using apic 8 int 18 (irq 9) for native-PCI interrupt pciide0: channel 0 ignored (not responding; disabled or no drives?) pciide0: channel 1 ignored (not responding; disabled or no drives?) Intel 82Q35 KT rev
Re: Debian libssl security (OpenSSH safe?)
On Tue, 13 May 2008 11:14:59 -0500 Sean Malloy [EMAIL PROTECTED] wrote: On Tue, May 13, 2008 at 11:37:38AM -0400, Juan Miscaro wrote: I guess everyone by now has heard about the very serious libssl vulnerability on Debian/Ubuntu? Just making sure that the source is safe, thanks. /juan Here is a quote from the official Debian Security announcement, DSA-1571 http://www.debian.org/security/2008/dsa-1571. This is a Debian-specific vulnerability which does not affect other operating systems which are not based on Debian. However, other systems can be indirectly affected if weak keys are imported into them. Just wondering... If someone generates ssh keys with flags J or Z set in malloc.conf(5), aren't these keys useless too (since feeding predictable data is more or less equal to not feeding data at all) ?
Great posters !
Nope, this is not a spam ;) We ordered posters some time ago and they just appeared in a wall near me, I now have a Puffy watching my code and roaring if I use strcpy ;) Posters are great and high quality, thank you OpenBSD !
