Re: Enabling VIMAGE by default for FreeBSD 11?

2014-11-10 Thread Julian Elischer
On 11/10/14, 5:30 PM, Nikolay Denev wrote: On Mon, Nov 10, 2014 at 2:33 AM, Craig Rodrigues wrote: On Sun, Oct 12, 2014 at 6:07 PM, Bjoern A. Zeeb < bzeeb-li...@lists.zabbadoz.net> wrote: Can you provide a pointer to your Perforce branch? //depot/user/bz/vimage/src/... Hi, Since I am m

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-11-10 Thread Nikolay Denev
On Mon, Nov 10, 2014 at 2:33 AM, Craig Rodrigues wrote: > On Sun, Oct 12, 2014 at 6:07 PM, Bjoern A. Zeeb < > bzeeb-li...@lists.zabbadoz.net> wrote: > >> >> >> > Can you provide a pointer to your Perforce branch? >> >> //depot/user/bz/vimage/src/... >> >> > Hi, > > Since I am more familiar with gi

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-11-09 Thread Craig Rodrigues
On Sun, Oct 12, 2014 at 6:07 PM, Bjoern A. Zeeb < bzeeb-li...@lists.zabbadoz.net> wrote: > > > > Can you provide a pointer to your Perforce branch? > > //depot/user/bz/vimage/src/... > > Hi, Since I am more familiar with git than Perforce, I converted your Perforce branch to git and put it on git

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-17 Thread Julian Elischer
On 10/17/14, 7:51 PM, Marko Zec wrote: On Fri, 17 Oct 2014 13:37:37 +0200 Marius Strobl wrote: On Wed, Oct 15, 2014 at 04:27:28PM -0700, Craig Rodrigues wrote: On Sun, Oct 12, 2014 at 6:35 AM, Kris Moore wrote: It was for a while in 9.2, but we removed it from 10.0 and later due to stabili

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-17 Thread Marko Zec
On Fri, 17 Oct 2014 13:37:37 +0200 Marius Strobl wrote: > On Wed, Oct 15, 2014 at 04:27:28PM -0700, Craig Rodrigues wrote: > > On Sun, Oct 12, 2014 at 6:35 AM, Kris Moore wrote: > > > > > > > > It was for a while in 9.2, but we removed it from 10.0 and later > > > due to stability issues we kep

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-17 Thread Marius Strobl
On Wed, Oct 15, 2014 at 04:27:28PM -0700, Craig Rodrigues wrote: > On Sun, Oct 12, 2014 at 6:35 AM, Kris Moore wrote: > > > > > It was for a while in 9.2, but we removed it from 10.0 and later due to > > stability issues we kept getting reports about. Haven't tried it since > > then, dont know if

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-16 Thread Julian Elischer
ue to vnet. Sent via the Samsung GALAXY S®4, an AT&T 4G LTE smartphone Original message From: Dag-Erling Smørgrav Date:10/16/2014 10:39 AM (GMT-08:00) To: "Bjoern A. Zeeb" Cc: freebsd-...@freebsd.org,freebsd-virtualization@freebsd.org,freebsd-arch Subject

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-16 Thread vijju.singh
GMT-08:00) To: "Bjoern A. Zeeb" Cc: freebsd-...@freebsd.org,freebsd-virtualization@freebsd.org,freebsd-arch Subject: Re: Enabling VIMAGE by default for FreeBSD 11? "Bjoern A. Zeeb" writes: > Dag-Erling Smørgrav writes: > > There are other serious issues with o

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-16 Thread Craig Rodrigues
On Sat, Oct 11, 2014 at 11:15 PM, Adrian Chadd wrote: > ... is it enabled by default on pcbsd? > Kris has answered the question about pcbsd and VIMAGE. As an additional datapoint, I would like to point out that VIMAGE has been enabled in FreeNAS for some time: https://github.com/freenas/freena

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-16 Thread Dag-Erling Smørgrav
"Bjoern A. Zeeb" writes: > Dag-Erling Smørgrav writes: > > There are other serious issues with our current pf (checksum > > corruption) which I think can only be resolved by importing a newer > > version. > Sorry, but you lost context. I was talking about security > implications in VIMAGE contex

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-16 Thread Craig Rodrigues
On Sat, Oct 11, 2014 at 10:58 AM, Craig Rodrigues wrote: > Hi, > > What action items are left to enable VIMAGE by default for FreeBSD 11? > > Not everyone uses bhyve, so VIMAGE is quite useful when using jails. > > Based on the discussion in this thread, I started writing down a list of action i

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-16 Thread Bjoern A. Zeeb
On 16 Oct 2014, at 08:52 , Dag-Erling Smørgrav wrote: > "Bjoern A. Zeeb" writes: >> Also if people are seriously thinking about virtualising pf we need to >> import the openbsd/apple pf fix from a few years ago because otherwise >> people in virtualised stacks with a /dev/pf can do ugly things.

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-16 Thread Dag-Erling Smørgrav
"Bjoern A. Zeeb" writes: > Also if people are seriously thinking about virtualising pf we need to > import the openbsd/apple pf fix from a few years ago because otherwise > people in virtualised stacks with a /dev/pf can do ugly things. I > think it’s been this one: > http://cve.mitre.org/cgi-bin

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-15 Thread Adrian Chadd
Something that just popped up here in local hacking is ensuring that all the vnet state is correctly torn down _after_ the system has finished with things that reference it. For example, having the vnet state torn out from underneath say, active TCP timers that haven't yet been cleaned up. Is tha

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-15 Thread Craig Rodrigues
On Sun, Oct 12, 2014 at 6:35 AM, Kris Moore wrote: > > It was for a while in 9.2, but we removed it from 10.0 and later due to > stability issues we kept getting reports about. Haven't tried it since > then, dont know if those issues are fixed. > I fixed some of the problems with VIMAGE that I e

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-14 Thread Craig Rodrigues
On Tue, Oct 14, 2014 at 5:53 AM, Olivier Cochard-Labbé wrote: > > I can use my forwarding/firewalling 10Giga lab for testing VIMAGE impact. > > Thank you for doing the test and providing the results. You put some good work into making those graphs and explaining the results! -- Craig

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-14 Thread Craig Rodrigues
On Tue, Oct 14, 2014 at 11:17 AM, John D. Hendrickson and Sara Darnell < johnandsa...@cox.net> wrote: > do you mean VIMAGE allows a jail to use an iface device for many IPs or > even MAC? i thought that was already the case all cards can "listen" - > it's only a headers trick per say. > > Search

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-14 Thread John D. Hendrickson and Sara Darnell
Alexander V. Chernikov wrote: On 11 Oct 2014, at 21:58, Craig Rodrigues wrote: Hi, What action items are left to enable VIMAGE by default for FreeBSD 11? Are there any tests results showing performance implications on different network-related workloads? Not everyone uses bhyve, so VIMAGE

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-14 Thread John D. Hendrickson and Sara Darnell
Alexander V. Chernikov wrote: On 11 Oct 2014, at 21:58, Craig Rodrigues wrote: Hi, What action items are left to enable VIMAGE by default for FreeBSD 11? well the next step is to make it a dependancy so that free bsd won't install without it, and to inject it in many binaries that insure

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-14 Thread Benjamin Kaduk
On Tue, 14 Oct 2014, Olivier Cochard-Labbé wrote: > I can use my forwarding/firewalling 10Giga lab for testing VIMAGE impact. > Here are my ministat results (smallest packet size, value in > packet-per-second, about 2000 flows). > => I didn't see lot's of performance impact with VIMAGE option adde

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-14 Thread Olivier Cochard-Labbé
On Tue, Oct 14, 2014 at 8:20 AM, Craig Rodrigues wrote: > On Sat, Oct 11, 2014 at 1:20 PM, Alexander V. Chernikov > wrote: > > > > > On 11 Oct 2014, at 21:58, Craig Rodrigues wrote: > > > > > Hi, > > > > > > What action items are left to enable VIMAGE by default for FreeBSD 11? > > Are there an

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-14 Thread k simon
在 14-10-13 0:38, Bjoern A. Zeeb 写道: On 12 Oct 2014, at 16:25 , Yamagi Burmeister wrote: Hello, it's been a while since I tested VIMAGE, but at the last time somewhere in 10-CURRENT some UMA memory leaks were left when destroying vnets. They weren't showstoppers for most workloads, but prett

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-13 Thread Craig Rodrigues
On Sat, Oct 11, 2014 at 1:20 PM, Alexander V. Chernikov wrote: > > On 11 Oct 2014, at 21:58, Craig Rodrigues wrote: > > > Hi, > > > > What action items are left to enable VIMAGE by default for FreeBSD 11? > Are there any tests results showing performance implications on different > network-relat

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-13 Thread Alexander V. Chernikov
On 13.10.2014 09:35, Julian Elischer wrote: On 10/12/14, 1:55 PM, wishmaster wrote: --- Original message --- From: "Alexander V. Chernikov" Date: 11 October 2014, 23:20:39 On 11 Oct 2014, at 21:58, Craig Rodrigues wrote: Hi, What action items are left to enable VIMAGE by default

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-12 Thread Julian Elischer
On 10/12/14, 1:55 PM, wishmaster wrote: --- Original message --- From: "Alexander V. Chernikov" Date: 11 October 2014, 23:20:39 On 11 Oct 2014, at 21:58, Craig Rodrigues wrote: Hi, What action items are left to enable VIMAGE by default for FreeBSD 11? Are there any tests

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-12 Thread Joe Maloney
I've noticed that when VIMAGE is enabled in kernel emulators/virtualbox-ose has to have VIMAGE set as well if installed. Otherwise VirtualBox kernel panics upon starting a VM. Other than that I've never had an issue with it, and quite like the idea of having it out of box. Joe Maloney On Sun, O

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-12 Thread Bjoern A. Zeeb
On 12 Oct 2014, at 18:19 , Craig Rodrigues wrote: > On Oct 12, 2014 9:39 AM, "Bjoern A. Zeeb" > wrote: >> >> No, an old perforce branch of mine had all but the last TCP ones fixed. > The code is still there. >> > > Can you provide a pointer to your Perforce branch? //depot/user/bz/vimage/sr

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-12 Thread Craig Rodrigues
On Sun, Oct 12, 2014 at 5:33 AM, Allan Jude wrote: > On 2014-10-12 07:28, Jason Hellenthal wrote: > > Should also add here that for those using PF as a firewall that VIMAGE > enabled kernels don't play to well together Unless you like looking at > cores all day. > > > > There have been patche

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-12 Thread Miguel Clara
For me pf is working pretty nice on the host, it's only on the jails that it can creates all kinds of trouble , but on the host I've not seen issues so far, in both freebsd 9 and 10. Have not tested in current though. On 12 October 2014 12:28:06 WEST, Jason Hellenthal wrote: >Should also add

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-12 Thread Craig Rodrigues
On Oct 12, 2014 9:39 AM, "Bjoern A. Zeeb" wrote: > > No, an old perforce branch of mine had all but the last TCP ones fixed. The code is still there. > Can you provide a pointer to your Perforce branch? -- Craig ___ freebsd-virtualization@freebsd.org m

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-12 Thread Bjoern A. Zeeb
On 12 Oct 2014, at 16:25 , Yamagi Burmeister wrote: > Hello, > it's been a while since I tested VIMAGE, but at the last time somewhere > in 10-CURRENT some UMA memory leaks were left when destroying vnets. > They weren't showstoppers for most workloads, but pretty anoying... > Have those been f

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-12 Thread Yamagi Burmeister
Hello, it's been a while since I tested VIMAGE, but at the last time somewhere in 10-CURRENT some UMA memory leaks were left when destroying vnets. They weren't showstoppers for most workloads, but pretty anoying... Have those been fixed? Regards, Yamagi On Sat, 11 Oct 2014 10:58:13 -0700 Craig

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-12 Thread Kris Moore
It was for a while in 9.2, but we removed it from 10.0 and later due to stability issues we kept getting reports about. Haven't tried it since then, dont know if those issues are fixed. On Oct 12, 2014, 2:15 AM, at 2:15 AM, Adrian Chadd wrote: >... is it enabled by default on pcbsd? > > >-a

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-12 Thread Allan Jude
On 2014-10-12 07:28, Jason Hellenthal wrote: > Should also add here that for those using PF as a firewall that VIMAGE > enabled kernels don't play to well together Unless you like looking at > cores all day. > There have been patches to address this. I know Martin m...@freebsd.org had somet

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-12 Thread Jason Hellenthal
Should also add here that for those using PF as a firewall that VIMAGE enabled kernels don't play to well together Unless you like looking at cores all day. -- Jason Hellenthal Mobile: +1 (616) 953-0176 jhellent...@dataix.net JJH48-ARIN On Oct 12, 2014, at 01:15, Adrian Chadd wrote:

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-11 Thread Craig Rodrigues
On Sat, Oct 11, 2014 at 11:15 PM, Adrian Chadd wrote: > ... is it enabled by default on pcbsd? > > > -a > It was enabled in PCBSD here: https://github.com/trueos/trueos/commit/3108bbe003bc38339fbd4a26542b184b2ccb271a -- Craig ___ freebsd-virtualizatio

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-11 Thread Adrian Chadd
... is it enabled by default on pcbsd? -a ___ freebsd-virtualization@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-virtualization To unsubscribe, send any mail to "freebsd-virtualization-unsubscr...@freebsd.org"

Re: Enabling VIMAGE by default for FreeBSD 11?

2014-10-11 Thread Alexander V. Chernikov
On 11 Oct 2014, at 21:58, Craig Rodrigues wrote: > Hi, > > What action items are left to enable VIMAGE by default for FreeBSD 11? Are there any tests results showing performance implications on different network-related workloads? > > Not everyone uses bhyve, so VIMAGE is quite useful when us