Re: npppd, framed_ip_address

2012-09-28 Thread YASUOKA Masahiko
Hi, On Thu, 27 Sep 2012 13:41:52 -0400 Andrew Ngo andrew@gmail.com wrote: Hm. I can't seem to get npppd to map users to static addresses in the npppd-users file, after trying various permutations of pool-address ##-## for static and such. The client is an iPhone running iOS 6.0, and is

Re: SSI

2012-09-28 Thread Otto Moerbeek
Op 27 sep. 2012 om 22:51 heeft Grumpy gru...@grumble-bubble.org het volgende geschreven: For starters, what is SSI? As many TLAs go, it can mean multiple things. I won't try to guess what you want. Obviously, SSI is a recursive acronym for ``SSI Shrinks Information''. I am surprised a CS

forgot to fdisk -i sd2

2012-09-28 Thread Jean-François SIMON
Hello, Yesterday, I have asked someone to install, disklabel, newfs and mount a disk on a small local server machine. I have forgotten to fdisk -i in the first place, it does however apparently work well. Please could you let me know which type of problem there could be or not at all if we do

Re: IPSEC VPN performance

2012-09-28 Thread Otto Moerbeek
On Thu, Sep 27, 2012 at 05:30:38PM -0400, Jim Miller wrote: Hi, I'm trying to determine if the performance I'm seeing between two OpenBSD 5.1 IPSEC VPN endpoints is typical (or expected). I recognize there are quite a few variables to consider and I'm sure I've not toggled each one but I

Re: forgot to fdisk -i sd2

2012-09-28 Thread Otto Moerbeek
On Fri, Sep 28, 2012 at 10:15:55AM +0200, Jean-Fran?ois SIMON wrote: Hello, Yesterday, I have asked someone to install, disklabel, newfs and mount a disk on a small local server machine. I have forgotten to fdisk -i in the first place, it does however apparently work well. Please could

Re: IPSEC VPN performance

2012-09-28 Thread Mike Belopuhov
On Thu, Sep 27, 2012 at 11:30 PM, Jim Miller jmil...@sri-inc.com wrote: Hi, I'm trying to determine if the performance I'm seeing between two OpenBSD 5.1 IPSEC VPN endpoints is typical (or expected). I recognize there are quite a few variables to consider and I'm sure I've not toggled each

Re: IPSEC VPN performance

2012-09-28 Thread Mike Belopuhov
On Fri, Sep 28, 2012 at 11:45 AM, Otto Moerbeek o...@drijf.net wrote: On Thu, Sep 27, 2012 at 05:30:38PM -0400, Jim Miller wrote: Hi, I'm trying to determine if the performance I'm seeing between two OpenBSD 5.1 IPSEC VPN endpoints is typical (or expected). I recognize there are quite a

Re: forgot to fdisk -i sd2

2012-09-28 Thread JFS
Le 28/09/2012 11:48, Otto Moerbeek a écrit : On Fri, Sep 28, 2012 at 10:15:55AM +0200, Jean-Fran?ois SIMON wrote: Hello, Yesterday, I have asked someone to install, disklabel, newfs and mount a disk on a small local server machine. I have forgotten to fdisk -i in the first place, it does

interfaces disappear when doing ospf6ctl reload

2012-09-28 Thread Manuel Guesdon
When running ospf6ctl reload, all interfaces disappear. It seems to come from IMSG_RECONF_IFACE message removal in rde.c v1.10 and ospf6d v1.8. Is another mechanism planned or should we re-add this IMSG_RECONF_IFACE message ? Manuel --

Re: SSI

2012-09-28 Thread Rod Whitworth
On Fri, 28 Sep 2012 09:20:59 +0200, Otto Moerbeek wrote: Veteran, yes. But as you know, the set of aquired acronyms depends much upon environment. I once had a meeting (fresh from university) with some IBM engineers on the subject of the introduction of the first RS/6000 models in .nl. I still

Re: IPSEC VPN performance

2012-09-28 Thread Peter Hessler
On 2012 Sep 27 (Thu) at 17:30:38 -0400 (-0400), Jim Miller wrote: :Hardware Configuration: :- (2) identical SuperMicro systems with quad core E31220 w/ AES-NI enabled : :cpu0: Intel(R) Xeon(R) CPU E31220 @ 3.10GHz (GenuineIntel 686-class) :3.10 GHz :cpu0:

Re: Open Source Routing @RIPE 65

2012-09-28 Thread Stuart Henderson
On 2012-09-27, Kostas Zorbadelos kzo...@otenet.gr wrote: RIPE 65 is happening this week and the following came to my attention. I think it is of interest due to all the routing work happening in OpenBSD. OpenBGPd was mentioned and a new RIPE WG on open source (esp routing software) is being

Re: openbsd router performance (i know.. again)

2012-09-28 Thread Stuart Henderson
On 2012-09-27, Anders Berggren and...@halon.se wrote: On Sep 26, 2012, at 10:05 PM, rik rikc...@gmail.com wrote: I haven't had yet the opportunity to upgrade it to -current, I'll do in the next few days. Perhaps this one will make a difference:

Re: SSI

2012-09-28 Thread sickmind
On 11:12 Fri 28 Sep , Darren Tucker wrote: On Thu, Sep 27, 2012 at 01:04:23PM -0700, Brian Empson wrote: Hello OpenBSD world, Has there been/are there plan to include some SSI functionality for BSD? Single System Image was one of the original design goals for DragonFly, but they

Re: forgot to fdisk -i sd2

2012-09-28 Thread Nick Holland
On 09/28/12 04:15, Jean-François SIMON wrote: Hello, Yesterday, I have asked someone to install, disklabel, newfs and mount a disk on a small local server machine. I have forgotten to fdisk -i in the first place, it does however apparently work well. Please could you let me know which

Re: Router project on OpenBSD questions

2012-09-28 Thread Otto Moerbeek
On Tue, Sep 25, 2012 at 05:51:42PM +0100, Stuart Henderson wrote: On 2012/09/25 18:24, Otto Moerbeek wrote: On Tue, Sep 25, 2012 at 11:11:19AM +, Stuart Henderson wrote: On 2012-09-25, Christoph Leser le...@sup-logistik.de wrote: Thank you for this hint. I indeed have ike.c

Re: IPSEC VPN performance

2012-09-28 Thread Jim Miller
Sorry I was stingy on the dmesg output. Here's the full dump. I will test with other AES modes now. -Jim OpenBSD 5.1 (GENERIC.MP) #188: Sun Feb 12 09:55:11 MST 2012 dera...@i386.openbsd.org:/usr/src/sys/arch/i386/compile/GENERIC.MP cpu0: Intel(R) Xeon(R) CPU E31220 @ 3.10GHz (GenuineIntel

Re: IPSEC VPN performance

2012-09-28 Thread Otto Moerbeek
On Fri, Sep 28, 2012 at 08:38:37AM -0400, Jim Miller wrote: Sorry I was stingy on the dmesg output. Here's the full dump. I will test with other AES modes now. And then install amd64 ;-) -Otto -Jim OpenBSD 5.1 (GENERIC.MP) #188: Sun Feb 12 09:55:11 MST 2012

Re: SSI

2012-09-28 Thread Diana Eichert
I remember asking Matt @ SC05 BSD BOF about SSI. He said it was a long term goal. That was 7 years ago, so maybe in another 7 years? diana PS How many acronyms can you use in an e-mail post? On Fri, 28 Sep 2012, sickm...@lavabit.com wrote: On 11:12 Fri 28 Sep , Darren Tucker wrote:

Re: IPSEC VPN performance

2012-09-28 Thread Jim Miller
Good catch. I've since upgraded to the amd64 kernel. See the below dmesg. The performance jumped from 40mbps to approx. 70mbps. This is obviously a significant jump. I've tried switching the childsa from aes-256-gmac, aes-256-gcm, aes-128 and the times are fairly constant. I assume the

Re: SSI

2012-09-28 Thread Kenneth R Westerback
On Fri, Sep 28, 2012 at 08:32:02AM -0600, Diana Eichert wrote: I remember asking Matt @ SC05 BSD BOF about SSI. He said it was a long term goal. That was 7 years ago, so maybe in another 7 years? diana PS How many acronyms can you use in an e-mail post? Piffle. The *real* challenge is how

Re: Router project on OpenBSD questions

2012-09-28 Thread Christoph Leser
Thank you for asking. I refreshed my system to -current as of 24. Sep 2012, so I now have sbin/ipsecctl/ike.c 1.77 Following the suggestion of Stuard Henderson I start isakmpd as isakmpd -K -T Now I get the same behaviour as I have with OpenBSD 4.6. All configured VPNs get connected. So

Re: SSI

2012-09-28 Thread Russell Garrison
I initially thought this thread was about Social Security Insurance, but instead it is about something like SGI UV.

Re: SSI

2012-09-28 Thread noah pugsley
Before Al Gore invented the internet he invented the Super-Serial Interface. On Fri, Sep 28, 2012 at 10:50 AM, Russell Garrison russell.garri...@gmail.com wrote: I initially thought this thread was about Social Security Insurance, but instead it is about something like SGI UV.

Re: IPSEC VPN performance

2012-09-28 Thread Christian Weisgerber
Jim Miller jmil...@sri-inc.com wrote: The test I'm using is this Host A: # nc -v -l 12345 | /dev/null Host B: # dd if=/dev/zero bs=1000 count=1 | nc -v host a 12345 I increased the count a bit: 10 bytes transferred in 53.265 secs (18773882 bytes/sec) That's with AES-256-GCM

Re: IPSEC VPN performance

2012-09-28 Thread Jim Miller
So I just realized another serious flaw in my testing. I was using a Mac Air w/ USB 100Mb ethernet adapter for one of the hosts behind the OpenBSD VPN devices. And it must have been limiting the speed more than I thought. So using another Mac w/ 1Gb ethernet adapter to a Linux box w/ 1Gb eth I

Re: SSI

2012-09-28 Thread Brian Empson
Wow This mailing list is crazy From: noah pugsley noah.pugs...@gmail.com To: Russell Garrison russell.garri...@gmail.com Cc: misc@openbsd.org Sent: Friday, September 28, 2012 2:03 PM Subject: Re: SSI Before Al Gore invented the internet he invented the

Re: SSI

2012-09-28 Thread Otto Moerbeek
On Fri, Sep 28, 2012 at 01:28:02PM -0700, Brian Empson wrote: Wow This mailing list is crazy I must object. Mailinglists are not crazy, people are crazy. -Otto

Re: IPSEC VPN performance

2012-09-28 Thread Hrvoje Popovski
Hi, On 28.9.2012 22:09, Jim Miller wrote: So using another Mac w/ 1Gb ethernet adapter to a Linux box w/ 1Gb eth I was able to achieve approx. 600Mbps performance through the test setup (via iperf and my dd method). 600Mbps via ipsec between two Intel E31220 ?

Re: IPSEC VPN performance

2012-09-28 Thread Jim Miller
Yes. Let me double check everything again on Monday. Keep in mind that all devices had 1Gb ethernet interfaces and everything was directly cabled. No pf rules either. w/o ipsec I could get 900mbps through the openbsd boxes. Now you've got me thinking I need to recheck everything. -Jim On

Estudia Gastronom?a en Argentina

2012-09-28 Thread Escuela de Gastronom?a
[IMAGE] Una vez más nos complace tomar contacto con aquellos que nos han conocido, ofreciendo lo que consideramos los mejores productos de nuestra labor educativa. Estas Carreras, se actualizan cada semestre, incorporando todas las novedades que la gastronomía europea nos deja saber, y las

isakmpd message dropped message from IP port 4500 due to notification type Unknown 0

2012-09-28 Thread Mik J
Hello, I have these messages that appear in my syslog on a regular basis Sep 27 05:52:51 obsd isakmpd[11819]: message_recv: bad message length Sep 27 05:52:51 obsd isakmpd[11819]: dropped message from REMOTE_IP port 4500 due to notification type Unknown 0 Sep 27 05:53:18 obsd isakmpd[11819]:

Re: IPSEC VPN performance

2012-09-28 Thread Ryan McBride
600Mbps seems about right, I tested a pair of E5649-based boxes to 550Mbps last year (with aes-128-gcm): http://marc.info/?l=openbsd-miscm=134033767126930 You'll probably get slightly more than 600 with with multiple TCP streams. Assuming PF was enabled for your test (the default