Problem with fwip(4) and limited size ll_addr in the struct llentry

2013-07-01 Thread Andrey V. Elsukov
use #ifdefs with increased size here. So, what the best way to fix this? -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to freebsd-net-unsubscr

Re: Problem with fwip(4) and limited size ll_addr in the struct llentry

2013-07-01 Thread Andrey V. Elsukov
On 01.07.2013 16:26, Vijay Singh wrote: If you enable OFED, then the llentry size is expanded to store IB addresses as well. Code should be in 9.x. Yes, but this isn't solution. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http

Re: CFR: FIB handling improvements

2013-08-22 Thread Andrey V. Elsukov
relating to FIBs: Hi, I also have a small patch. Since icmp6_mtudisc_update() calls tcp_maxmtu6() where inc-inc_fibnum is used, I think it is good idea to initialize this field. -- WBR, Andrey V. Elsukov Index: head/sys/netinet6/icmp6.c

Re: devel/jenkins port not starting. Kernel panic in IPv6 multicast code

2013-08-27 Thread Andrey V. Elsukov
. -- WBR, Andrey V. Elsukov signature.asc Description: OpenPGP digital signature

[RFC] Don't embed scope zone id into IPv6 addresses

2013-09-24 Thread Andrey V. Elsukov
there are many of small changes that should be done. I would like to see your opinions about first point. [1] http://tinyurl.com/figure2-12 -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net

Re: ipfw / routing issue on 9.2-RELEASE

2014-03-05 Thread Andrey V. Elsukov
are intact. Why does the kernel not forward those packets? What is the last rule? I suspect it is deny all? -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail

Re: ipfw / routing issue on 9.2-RELEASE

2014-03-05 Thread Andrey V. Elsukov
how it can affect routing. Make sure: 1. net.inet.ip.forwarding=1 (gateway_enable=YES in rc.conf) 2. you have route and gateway is reachable (route get/arp -n). -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org

Re: fastforward/routing: a 3 million packet-per-second system?

2014-07-24 Thread Andrey V. Elsukov
(with fastforwarding) about 7 Mpps IPv4 and 2.5Mpps IPv6. But the stock system is far from even half of this results. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any

Re: fastforward/routing: a 3 million packet-per-second system?

2014-07-28 Thread Andrey V. Elsukov
On 24.07.2014 16:47, John Jasen wrote: On 07/24/2014 05:24 AM, Andrey V. Elsukov wrote: On 22.07.2014 19:18, John Jasen wrote: Feedback and/or tips and tricks more than welcome. Outstanding questions: Would increasing the number of processor cores help? AFAIR, increasing the number

Re: [Bug 193246] Bug in IPv6 multicast join(), uncovered by Jenkins

2014-09-03 Thread Andrey V. Elsukov
that this code works in linux. I looked in the linux kernel source, and I think it should return EINVAL too. net/ipv6/mcast.c:ipv6_sock_mc_join: 154 if (!ipv6_addr_is_multicast(addr)) 155 return -EINVAL; -- WBR, Andrey V. Elsukov

Re: [Bug 193246] Bug in IPv6 multicast join(), uncovered by Jenkins

2014-09-03 Thread Andrey V. Elsukov
On 03.09.2014 17:39, Craig Rodrigues wrote: On Wed, Sep 3, 2014 at 5:19 AM, Andrey V. Elsukov a...@freebsd.org wrote: On 03.09.2014 14:05, bugzilla-nore...@freebsd.org wrote: Hi, you said that this code works in linux. I looked in the linux kernel source, and I think it should return EINVAL

Re: svn commit: r272089 - head/sys/netpfil/ipfw

2014-09-25 Thread Andrey V. Elsukov
(delayed in the dummynet pipe). I think this is well known problem. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org

Re: Addressing refcount issues in ip6_setdstifaddr and ip6_getdstifaddr routines.

2014-09-30 Thread Andrey V. Elsukov
and in the ip6_getdstifaddr() we can use the ifa_withifaddr() routines to retrieve the ia by basically looping through the list of ifaddrs. Hi, *Solution 3:* Remove this code :) What you think about this? https://svnweb.freebsd.org/base?view=revisionrevision=256673 -- WBR, Andrey V. Elsukov

Re: Addressing refcount issues in ip6_setdstifaddr and ip6_getdstifaddr routines.

2014-10-03 Thread Andrey V. Elsukov
will be needed when mobile IPv6 support will be added. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org

Re: userfw - modular packet filter

2012-02-13 Thread Andrey V. Elsukov
, Maxim Why do you called it userfw? Does it work in user level? :) -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org

Re: problem on ipfw using mac addresses

2012-07-04 Thread Andrey V. Elsukov
or suggestions are really appreciated. Please, read the ipfw(4) manual page about the sysctl variable net.link.ether.ipfw. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net

Re: kern/168742: detaching of ethernet adapter with configured vlans leads to panic

2012-08-14 Thread Andrey V. Elsukov
went away, __func__)); -#endif if (ifp == NULL) return (ENOENT); -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail

Re: kern/168742: detaching of ethernet adapter with configured vlans leads to panic

2012-08-20 Thread Andrey V. Elsukov
=== --- if_vlan.c (revision 239294) Hi, John. This also works, thanks. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to freebsd-net-unsubscr

[RFC] Enabling IPFIREWALL_FORWARD in run-time

2012-10-19 Thread Andrey V. Elsukov
/pfil_forward.diff Also we have done some tests with the ixia traffic generator connected via 10G network adapter. Tests have show that there is no visible difference, and there is no visible performance degradation. Any objections? -- WBR, Andrey V. Elsukov signature.asc Description: OpenPGP

Re: [RFC] Enabling IPFIREWALL_FORWARD in run-time

2012-10-19 Thread Andrey V. Elsukov
is undesirable, because we can have kernel without ipfw. So, i decided to choose pfil, because it could not work without pfil. -- WBR, Andrey V. Elsukov signature.asc Description: OpenPGP digital signature

[RFC] IPv6 ifaddr hash

2012-12-07 Thread Andrey V. Elsukov
think 512 buckets is too many. 2. What hash function is better to use? 3. Using the whole 128 bit of address to hash seems like overkill. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd

Re: [PATCH] Handle PACKET_TAG_IPFORWARD and TIMEWAIT state

2013-03-01 Thread Andrey V. Elsukov
at: http://people.freebsd.org/~emaste/patches/fwd_tag_findpcb.diff Hi Ed, it seems this problem was there before my breakage. Also, it think that m_tag_unlink is redundant here, because you clear the M_IP_NEXTHOP/M_IP6_NEXTHOP flag. -- WBR, Andrey V. Elsukov

Re: dummynet, flowmask and IPv6

2011-04-29 Thread Andrey V. Elsukov
On 29.04.2011 00:44, Lev Serebryakov wrote: Hello, Freebsd-net. Does queue/sched masks work with IPv6 addresses? I can not find any examples for this, all examples are with 32-bit masks only... Hi, it should work, just try use bigger masks values and ipv6 specifiers. -- WBR, Andrey V

Re: kern/157802: [dummynet] [panic] kernel panic in dummynet

2011-06-16 Thread Andrey V. Elsukov
The following reply was made to PR kern/157802; it has been noted by GNATS. From: Andrey V. Elsukov a...@freebsd.org To: bug-follo...@freebsd.org, alexey_kovale...@inbox.ru Cc: Subject: Re: kern/157802: [dummynet] [panic] kernel panic in dummynet Date: Thu, 16 Jun 2011 15:05:59 +0400 Hi

Re: [urtw] Wifi link dying randomly. reboot required to reconnect.

2011-12-05 Thread Andrey V. Elsukov
On 05.12.2011 9:29, Adrian Chadd wrote: Hi, Can you please just fire up kgdb and get a backtrace from the core? There should be core.X.txt file, usually it already has a backtrace. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list

Re: [Removal of mrouted in FreeBSD-7.0]

2008-06-06 Thread Andrey V. Elsukov
mrouted, you can install it from ports/net/mrouted. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: UDP checksum invalid on FreeBSD7/x86

2008-06-20 Thread Andrey V. Elsukov
, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: UDP checksum invalid on FreeBSD7/x86

2008-06-20 Thread Andrey V. Elsukov
Peter Kirk wrote: On Friday 20 June 2008 11:10:06 Andrey V. Elsukov wrote: I have a fresh installation of FreeBSD7 on x86, with no big changes to the system. Can you show `ifconfig -u` output? re0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 1500 options=9bRXCSUM

Re: IPFW_TABLES_MAX in src/sbin/ipfw/ipfw2.c

2008-09-01 Thread Andrey V. Elsukov
it appears in.) *** Error code 1 IPFW_TABLES_MAX seems like defined in netinet/ip_fw.h, which is included in ipfw2.c: IPFW_TABLES_MAX protected by _KERNEL macro. This is why you get an error. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing

Re: RFC: interface description

2009-08-13 Thread Andrey V. Elsukov
Something similar was rejected at least two times :) http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/83622 http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/110720 -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org

Re: RFC: interface description

2009-08-14 Thread Andrey V. Elsukov
, clean up the file upon restart, but we can not prevent other programs from calling IOCSIFNAME on the interface. Any idea for this? What about using interface index as a key(see if_nameindex(3))? -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org

Re: freebsd 8.1 crash with ECMP

2010-08-23 Thread Andrey V. Elsukov
On 23.08.2010 3:38, Ingo Flaschberger wrote: ifconfig em0 10.11.11.175/24 ifconfig em0 alias 10.20.20.1/24 route add -net 10.20.20.0/24 10.11.11.1 -weight 2 Fatal trap 12: page fault while in kernel mode Hi, Can you show output of `ident /usr/src/sys/dev/e1000/if_*`? -- WBR, Andrey V

Re: mpd sometimes hangs the whole system?

2007-02-20 Thread Andrey V. Elsukov
computer reboot? See the above links. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: ipfw tags filtering incoming broadcasts

2007-04-11 Thread Andrey V. Elsukov
or dst-port 520 with udp protocol? -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: ng_tag and pf?

2007-04-17 Thread Andrey V. Elsukov
Is it possible to use ng_tag in conjunction with pf? I have a setup At this time it's impossible. You can use ng_tag(4) in conjunction with ipfw(4). -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman

Re: ipfw nat befuddlement

2007-10-07 Thread Andrey V. Elsukov
logging to syslogd(8) options IPFIREWALL_VERBOSE_LIMIT=100#limit verbosity options IPDIVERT options LIBALIAS You need also: options IPFIREWALL_NAT #ipfw kernel nat support -- WBR, Andrey V. Elsukov

Re: ipfw nat befuddlement

2007-10-08 Thread Andrey V. Elsukov
Randy Bush wrote: # grep -n nat /etc/ipfw.rules 33:add nat 123 all from any to any 34:add nat 123 config if vr0 - add is not needed here. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman

Re: IPFW/Divert problem...

2007-11-06 Thread Andrey V. Elsukov
script you should use -f flag when you run ipfw flush command. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: IPFW/Divert problem...

2007-11-06 Thread Andrey V. Elsukov
, when you run `ipfw flush` in the /etc/ipfw.sh script. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: WOL suport in Broadcom 5721 (57XX)

2007-12-17 Thread Andrey V. Elsukov
there was a discussion about WOL support. Look to topics: 1. FreeBSD WOL sis on 2. How to add wake on lan support for your card And as i remember, Sam Leffer has made some work for WOL support. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http

Re: addition to ipfw table..

2008-04-17 Thread Andrey V. Elsukov
? -- WBR, Andrey V. Elsukov Index: src/sbin/ipfw/ipfw2.c === RCS file: /ncvs/src/sbin/ipfw/ipfw2.c,v retrieving revision 1.118 diff -u -p -r1.118 ipfw2.c --- src/sbin/ipfw/ipfw2.c 27 Feb 2008 13:52:33 - 1.118 +++ src/sbin

Re: kern/123053: [re] re(4) unsupported hardware revision

2008-04-24 Thread Andrey V. Elsukov
Responsible-Changed-Why: Over to maintainer(s). http://www.freebsd.org/cgi/query-pr.cgi?pr=123053 Hi, Martin. Can you try this patch? http://butcher.heavennet.ru/re.spin4.patch It's originally written by yongari@, but I didn't get response from the guy which has this hardware. -- WBR, Andrey V

Re: bsnmp-regex SNMP module

2006-04-07 Thread Andrey V. Elsukov
Nate Nielsen wrote: Anyone want to help with the FreeBSD port? I can try to include this module as optional part of net-mgmt/bsnmpd. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo

Re: bsnmp-regex SNMP module

2006-04-07 Thread Andrey V. Elsukov
Harti Brandt wrote: That would not help people running current, because the port is only build for version that don't have bsnmpd in the tree. I can make it like bind9, PORT_REPLACES_BASE_BSNMPD :) Can you include all bsnmp modules with bsnmpd sources? -- WBR, Andrey V. Elsukov

Re: ipfw divert with layer2 (if_bridge) packets

2006-05-10 Thread Andrey V. Elsukov
Julian Elischer wrote: I have changes that make it work in 4.x but they will not apply to 5.x or later.. Luigi also has some changes that allow it.. I can try porting an older patches which allow this. Is there a chance for including this feature into base system? -- WBR, Andrey V. Elsukov

[patch] ipfw packet tagging

2006-05-10 Thread Andrey V. Elsukov
: http://butcher.heavennet.ru/patches/kernel/ipfw_tags/ -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: [fbsd] [patch] ipfw packet tagging

2006-06-21 Thread Andrey V. Elsukov
patch that uses a tableargs feature with ipfw_tags to CURRENT: http://docs.freebsd.org/cgi/mid.cgi?200606150939.k5F9dMrB019958 -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net

Re: DNS query performance

2006-09-14 Thread Andrey V. Elsukov
. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: 88E8053 Yukon2 PCI-E GbE - any plans to port msk() driver from OpenBSD?

2006-10-06 Thread Andrey V. Elsukov
Artem Belevich wrote: OpenBSD apparently got a driver for Marvell Yukon2 Gigabit Ethernet adapters that these days present on quite a few motherboards (or as a relatively inexpensive PCI-Express card). NetBSD got it as well. See here: http://people.freebsd.org/~yongari/msk/ -- WBR, Andrey V

Re: Instructing dhclient to set hostname of client

2006-10-22 Thread Andrey V. Elsukov
in dhclient.conf and take effect when a DHCP server not respond. MS Windows have a similar feature. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to [EMAIL

Re: Instructing dhclient to set hostname of client

2006-10-24 Thread Andrey V. Elsukov
Doug Barton wrote: I think making FreeBSD more like Windows is a bad idea. :) Yes, i partially agree, but this feature can be usefull on a laptops. If this feature will have a chance to commit, I can try to implement it. -- WBR, Andrey V. Elsukov

Runtime control for the IPFIREWALL_FORWARD

2006-12-15 Thread Andrey V. Elsukov
Hi, All! I want get the IPFIREWALL_FORWARD feature without a kernel rebuild. And use forwarding with the ipfw kld. It's possible to have this functional in the base system? If yes, then which is preferred way: sysctl or kld? -- WBR, Andrey V. Elsukov

Re: Runtime control for the IPFIREWALL_FORWARD

2006-12-16 Thread Andrey V. Elsukov
Andrey V. Elsukov wrote: This introduces quite a bit of extra code into the path of IP packets. Yes, it will add a few extra checks like a if (pfil_forward_enabled) {...} Some people are very sensitive about anything that slows down that path. I can introduce a new kernel option

Re: Broken IPsec + enc +pf/ipfw

2014-10-20 Thread Andrey V. Elsukov
be applicable to stable/10. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org

Re: Broken IPsec + enc +pf/ipfw

2014-10-20 Thread Andrey V. Elsukov
On 21.10.2014 00:00, Matthew Grooms wrote: On 10/20/2014 2:47 PM, Andrey V. Elsukov wrote: On 20.10.2014 20:18, Matthew Grooms wrote: Lastly, I tried to locate a relevant PR but didn't find anything concrete. Is this related to the issue? And if so, can it be MFCd? https://bugs.freebsd.org

Re: Broken IPsec + enc +pf/ipfw

2014-10-23 Thread Andrey V. Elsukov
see the traffic on the gif interface so return traffic gets blocked for lack of a state entry ). Since you applied r266800, you now may apply r272394. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman

[RFC][RFT] overhaul if_gre(4)

2014-10-29 Thread Andrey V. Elsukov
and outer header. * deprecate support for various GREXXX ioctls, use our standard ioctls for tunnels. me(4): * use the same locking model as gre(4); * use if_transmit; * implementation conform to RFC 2004; -- WBR, Andrey V. Elsukov signature.asc Description: OpenPGP digital signature

Re: [RFC][RFT] overhaul if_gre(4)

2014-10-29 Thread Andrey V. Elsukov
On 29.10.2014 12:35, Andrey V. Elsukov wrote: Hi All, I prepared the patch for review https://reviews.freebsd.org/D1023 For those who want to test, I prepared a tarball with sources https://people.freebsd.org/~ae/gre.tgz Modules should work on stable/10 and head/ without

Re: transparent udp proxy

2014-10-31 Thread Andrey V. Elsukov
destination address. Probably you have NAT that does this. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org

Re: transparent udp proxy

2014-10-31 Thread Andrey V. Elsukov
versions don't overwrite destination address. https://svnweb.freebsd.org/base?view=revisionrevision=225044 -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe

Re: netmap in GENERIC, by default, on HEAD

2014-11-05 Thread Andrey V. Elsukov
kernel compiled with IPSEC can forward only 180 kpps. I think this problem should be solved before enabling it in GENERIC. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net

Re: netmap in GENERIC, by default, on HEAD

2014-11-05 Thread Andrey V. Elsukov
helps in kernel SSL encryption (key per IP vs per TCP session). IPSEC had unresolved bugs for years, and now all will be magically fixed. I think we need some way to enable/disable it on the fly. This may be a compromise. -- WBR, Andrey V. Elsukov signature.asc Description: OpenPGP digital

Re: netmap in GENERIC, by default, on HEAD

2014-11-05 Thread Andrey V. Elsukov
On 05.11.2014 19:18, Evandro Nunes wrote: On Wed, Nov 5, 2014 at 1:52 PM, Andrey V. Elsukov bu7c...@yandex.ru wrote: On 05.11.2014 18:39, George Neville-Neil wrote: Howdy, Last night (Pacific Time) I committed a change so that GENERIC, on HEAD has the netmap device enabled

Re: netmap in GENERIC, by default, on HEAD

2014-11-05 Thread Andrey V. Elsukov
On 05.11.2014 18:52, Andrey V. Elsukov wrote: recently we did some IP forwarding tests and the GENERIC kernel is several times faster than GENERIC+IPSEC. Even when IPSEC has no SA. I didn't do test on vanilla kernel, but our kernel is able forward IPv4/IPv6 on rate close to 8.6 Mpps

Re: kldload ip_mroute.ko vs. kernel options MROUTING

2014-11-13 Thread Andrey V. Elsukov
notice that, with a custom kernel, patching is much more complex and time consuming. As binary updates are not possible any more. You don't need rebuild the kernel. Just load the module. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list

[RFC] add macros for ifnet statistic accounting

2014-11-20 Thread Andrey V. Elsukov
V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org

Re: IPsec is very broken...

2014-11-20 Thread Andrey V. Elsukov
hosts and it works. I use racoon and isakmpd for IKE. ICMP, TCP (ssh) and UDP (ike) works for me. How do you test? Do you use software crypto or aesni? -- WBR, Andrey V. Elsukov signature.asc Description: OpenPGP digital signature

Re: IPSec and StrongSWAN result in wrong forward

2014-12-12 Thread Andrey V. Elsukov
a firewall with inner address Y and outer address U. Do you use gif(4) to create tunnels? -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to freebsd-net

Re: [RFC] add macros for ifnet statistic accounting

2014-12-19 Thread Andrey V. Elsukov
On 20.11.2014 20:38, Adrian Chadd wrote: On 20 November 2014 09:33, Andrey V. Elsukov a...@freebsd.org wrote: Hi All, we already did some changes in network stack in head/, that made ability for merging changes into stable branches much harder. What you think about adding the following

[Differential] [Changed Subscribers] D1388: IP6: Turned on verbose logging for fragment handling code

2014-12-29 Thread ae (Andrey V. Elsukov)
ae added a subscriber: ae. ae added a comment. I think you need to adjust some comments in frag6_input(). REVISION DETAIL https://reviews.freebsd.org/D1388 To: kibab, bz Cc: ae, freebsd-net ___ freebsd-net@freebsd.org mailing list

Re: timeout option in ping6

2015-01-16 Thread Andrey V. Elsukov
as replied, but considered as replied when calculating statistics. -X timeout Specify a timeout, in seconds, before ping exits regardless of how many packets have been received. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing

[Differential] [Accepted] D1764: Factor out ip6_deletefraghdr()

2015-02-12 Thread ae (Andrey V. Elsukov)
ae added a subscriber: ae. ae accepted this revision. ae added a reviewer: ae. ae added a comment. I have no objections against it, the code looks similar to previous implementation. REVISION DETAIL https://reviews.freebsd.org/D1764 To: kristof, glebius, ae Cc: ae, glebius, freebsd-net

[Differential] [Changed Subscribers] D1777: Associated fix for arp/nd6 timer usage.

2015-02-08 Thread ae (Andrey V. Elsukov)
ae added a subscriber: ae. ae added a comment. You said about some panics, do you have traces? REVISION DETAIL https://reviews.freebsd.org/D1777 To: rrs, imp, sbruno, gnn, rwatson, lstewart, kostikbel, adrian, jhb, bz Cc: ae, bz, emaste, hiren, julian, hselasky, freebsd-net

Re: Padded packets in ip6_input()

2015-03-15 Thread Andrey V. Elsukov
, ifs6_in_truncated); + goto bad; + } This is very rare case, I think, but plen can be zero in case, when jumbo payload option is present. Probably this is the reason why this check is done after hop-by-hop options parsing. -- WBR, Andrey V. Elsukov signature.asc Description

Re: gre(4) over IPv6

2015-03-16 Thread Andrey V. Elsukov
, Andrey V. Elsukov signature.asc Description: OpenPGP digital signature

Re: [PATCH] Fix panic with pf fastroute

2015-03-11 Thread Andrey V. Elsukov
V. Elsukov signature.asc Description: OpenPGP digital signature

Use public mailing list for reviewing patches

2015-03-03 Thread Andrey V. Elsukov
contain some user-visible/useful feature, that users can test or discuss, please, use special phabricator's group '#network' for review instead of freebsd-net@. Thanks. -- WBR, Andrey V. Elsukov signature.asc Description: OpenPGP digital signature

[Differential] [Changed Subscribers] D1986: Teach lagg(4) to change MTU

2015-03-01 Thread ae (Andrey V. Elsukov)
ae added a subscriber: ae. ae added a comment. Just a thought. Imagine two interfaces, one has maximum MTU 2200, another 1500. lagg0 has MTU 1400. Two threads invokes changing MTU in the same time. One wants to change it to 2000, another - to 1500. It is possible, that when both threads will

[Differential] [Commented On] D1986: Teach lagg(4) to change MTU

2015-03-01 Thread ae (Andrey V. Elsukov)
ae added a comment. ! In D1986#7, @rstone wrote: RLOCK only gets a read lock. You want WLOCK to get a write lock to ensure serialization. Also we can use another lock in the lagg_ioctl, that will prevent simultaneous MTU changing. REVISION DETAIL https://reviews.freebsd.org/D1986 To:

Re: pagefault in IPv6 codepath in defrouter_select()

2015-03-26 Thread Andrey V. Elsukov
, Andrey V. Elsukov signature.asc Description: OpenPGP digital signature

Re: IPSec Performance under Xen

2015-04-23 Thread Andrey V. Elsukov
does needed configuration via setsockopt(IP_IPSEC_POLICY)? -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org

Re: IPSec Performance under Xen

2015-04-23 Thread Andrey V. Elsukov
(ip_ipsec_output(m, inp, flags, error)) { + switch(ip_ipsec_output(m, NULL, flags, error)) { case 1: goto bad; case -1: -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo

Re: IPSec Performance under Xen

2015-04-23 Thread Andrey V. Elsukov
a IPSec connection and report back. Thank you. But I think something will not work if you try it with IPSec. Probably if you use some IKE software, it will not work with this patch. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http

Re: FreeBSD makes linux think other subet is in same lan.

2015-05-07 Thread Andrey V. Elsukov
? (192.168.1.125) at b4:52:7e:95:2a:f5 [ether] on eth0 I think it is because FreeBSD sends ICMP redirects when it finds that route to the given destination goes back to the receiving interface. Try to disable ICMP redirects: # sysctl net.inet.ip.redirect=0 -- WBR, Andrey V. Elsukov

Re: FreeBSD makes linux think other subet is in same lan.

2015-05-06 Thread Andrey V. Elsukov
On 06.05.2015 15:51, Martin Larsson wrote: This is a small summary of https://forums.freebsd.org/threads/routing-issue-with-ipsec-windows-works-linux-doesnt.51201/ Can you provide run-time configuration from your FreeBSD gateway? # setkey -D # setkey -DP # netstat -rnf inet -- WBR, Andrey V

Re: Crash with GRE und IPFW fwd

2015-06-06 Thread Andrey V. Elsukov
On 01.06.2015 18:56, Julian Kornberger wrote: Am 28.05.2015 um 15:59 schrieb Andrey V. Elsukov: Also can you try this module instead of one from your base system? https://people.freebsd.org/~ae/gre-10.tgz This is ported to stable/10 version from 11.0-CURRENT. I installed your gre module

Re: Multicast routing questions

2015-06-25 Thread Andrey V. Elsukov
soon. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org

Re: Multicast routing questions

2015-06-25 Thread Andrey V. Elsukov
joined to multicast group on the specific interface used as outgoing in send_packet. -- WBR, Andrey V. Elsukov ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to freebsd-net

Re: Crash with GRE und IPFW fwd

2015-05-28 Thread Andrey V. Elsukov
On 28.05.2015 17:22, Julian Kornberger wrote: Am 28.05.2015 um 15:59 schrieb Andrey V. Elsukov: Can you enable dumpon(8) in your rc.conf, then get the crash dump and show content of your /var/crash/core.txt.N file? Also can you try this module instead of one from your base system? https

Re: Crash with GRE und IPFW fwd

2015-05-28 Thread Andrey V. Elsukov
On 29.05.2015 04:13, Julian Kornberger wrote: Am 29.05.2015 um 01:35 schrieb Andrey V. Elsukov: The actual panic occurs when ip_output() does RO_RTFREE() to cached route owned by gre(4). #7 0x80a58105 in ip_output (m=0xf800054bb000, opt=value optimized out, flags=value

Re: Crash with GRE und IPFW fwd

2015-05-28 Thread Andrey V. Elsukov
your base system? https://people.freebsd.org/~ae/gre-10.tgz This is ported to stable/10 version from 11.0-CURRENT. -- WBR, Andrey V. Elsukov signature.asc Description: OpenPGP digital signature

Re: Crash with GRE und IPFW fwd

2015-05-28 Thread Andrey V. Elsukov
, it loses this tag. You need to check your rules and avoid applying divert rules to GRE packets. Also you can use some netgraph based tcpmss implementation. -- WBR, Andrey V. Elsukov signature.asc Description: OpenPGP digital signature

Re: radvd issue on CURRENT

2015-07-03 Thread Andrey V. Elsukov
) return (EADDRNOTAVAIL); -- WBR, Andrey V. Elsukov signature.asc Description: OpenPGP digital signature

Re: panic: refcount inconsistency: found: 0 total: 1

2015-11-03 Thread Andrey V. Elsukov
age. -- WBR, Andrey V. Elsukov signature.asc Description: OpenPGP digital signature

Re: Page fault after destroying/reconfiguring GRE interface

2015-10-05 Thread Andrey V. Elsukov
https://svnweb.freebsd.org/base?view=revision=288529 -- WBR, Andrey V. Elsukov signature.asc Description: OpenPGP digital signature

Re: What does this sa6_recoverscope msg mean?

2015-07-07 Thread Andrey V. Elsukov
it claims are routers. But I still can't get routing. Is the above message pointing at my error or at my provider's error? No, this is debug message. It means that sin6_scope_id is already filled in struct sockaddr_in6. You can ignore it or just upgrade your system. -- WBR, Andrey V. Elsukov

Re: routine that configure 127.0.0.1

2015-10-01 Thread Andrey V. Elsukov
On 01.10.2015 06:39, Sechang Son wrote: > Hi, > > Can somebody tell me the name of the routine that configures 127.0.0.1 to > loif of Vnet‹i.e., V_loif? I checked Œvnet_loif_init¹ but it does not seem > to be doing thatŠ Thanks a lot. It is ipv4_up() from /etc/network.subr. --

Re: Page fault after destroying/reconfiguring GRE interface

2015-10-04 Thread Andrey V. Elsukov
f81d00, off=20) > at /usr/src/sys/netinet/ip_encap.c:149 > #10 0x80a77f57 in ip_input (m=0xf8001ef81d00) > at /usr/src/sys/netinet/ip_input.c:734 > [...] > > Any ideas? Can you test this patch? -- W

Re: Multiple cores/race conditions in IPv6 RA

2015-12-09 Thread Andrey V. Elsukov
> Is it worth creating an issue report to track/resolve this, with 10.3 > coming up? This problem exists since 4.x-5.x, so, I don't think that creating a report will automatically resolve it :) -- WBR, Andrey V. Elsukov signature.asc Description: OpenPGP digital signature

Re: Multiple cores/race conditions in IPv6 RA

2015-12-09 Thread Andrey V. Elsukov
fore we go down that road. Hi, some time ago Mark Johnston has published there the patch related to this problem: https://lists.freebsd.org/pipermail/freebsd-net/2013-February/034682.html Maybe Mark has something to say about it. -- WBR, Andrey V. Elsukov signature.asc Description: OpenPGP digital signature

  1   2   3   4   >