Re: Relayd with TLS and non-TLS backends - bug

2020-07-05 Thread Henry Bonath
return code: 0 (ok) --- and Netcat: nc -zv 192.168.42.61 443 Connection to 192.168.42.61 443 port [tcp/https] succeeded! On Fri, Jul 3, 2020 at 9:40 PM Daniel Jakots wrote: > > On Fri, 3 Jul 2020 19:14:17 -0400, Henry Bonath > wrote: > > > Daniel, > > > > Than

Re: Relayd with TLS and non-TLS backends - bug

2020-07-03 Thread Henry Bonath
On Thu, 2 Jul 2020 14:00:48 -0400, Henry Bonath > wrote: > > > Note the missing Client Hello on the 6.7 machine as it jumps to > > Application Data straight away. > > Configuration files for HAProxy are identical on both systems. > > > > I'm currently spi

Re: Relayd with TLS and non-TLS backends - bug

2020-07-02 Thread Henry Bonath
I would like to chime in here and confirm that I am seeing very similar behavior with HAProxy on OpenBSD 6.7, I was preparing to create my own post on this issue until I saw your thread. I too believe this is a bug. I also get the same "Empty reply" response you get via Curl: > GET / HTTP/1.1 >

Re: Thinking of changing DNS Service provider, looking for recommendations

2020-01-08 Thread Henry Bonath
I've used Hurricane Electric's free DNS service for years now along with their Tunnelbroker since my ISP still does not support IPv6 yet. They also support dynamic updates which works with "ddclient" from the OpenBSD package repo. https://dns.he.net/ On Thu, Jan 2, 2020 at 8:25 AM Jay Hart

Re: OpenBSD BFD support

2019-11-07 Thread Henry Bonath
While I cannot comment to the BFD support in OpenBSD, I can say that I have seen Peter Hessler around here, so hopefully he sees this and can answer your question. BFD would be a very nice addition to see, considering the maturity level we are getting to with BGPD and MPLS support. On Wed, Nov

Re: bgplg ping/traceroute failed

2019-10-04 Thread Henry Bonath
will definitely do since this thing will be public-facing. Again, I appreciate you guys taking the time to explain this to me! -Henry On Thu, Oct 3, 2019 at 2:56 PM Claudio Jeker wrote: > On Thu, Oct 03, 2019 at 02:07:58PM -0400, Henry Bonath wrote: > > Hello Misc, > > > >

Re: bgplg ping/traceroute failed

2019-10-03 Thread Henry Bonath
Thanks Theo, that thought had briefly crossed my mind, and it looks like you are correct! /dev/sd0e on /var type ffs (local, nodev, nosuid) I appreciate your quick response! -Henry On Thu, Oct 3, 2019 at 2:10 PM Theo de Raadt wrote: > Henry Bonath wrote: > > > Hello Misc, &

bgplg ping/traceroute failed

2019-10-03 Thread Henry Bonath
Hello Misc, I had thought that I had configured the looking glass correctly per the man page, I have everything else working correctly, with custom header and footer with CSS and all works great. Whenever I attempt to ping/traceroute from the webpage, it simlpy reports: "failed." Here is what

Re: ospf point to point network

2019-06-23 Thread Henry Bonath
I merely was giving an example of what *could* be done - not necessarily of what *should* be done ;-) On Sun, Jun 23, 2019 at 12:40 PM Stuart Henderson wrote: > > On 2019-06-22, Henry Bonath wrote: > > What about GRE(4) with a Cisco router on the other end? > > > &

Re: ospf point to point network

2019-06-21 Thread Henry Bonath
What about GRE(4) with a Cisco router on the other end? /etc/hostname.gre123: 1.1.1.1 1.1.1.2 netmask 255.255.255.252 up tunnel IP.OF.OB.SD IP.OF.I.OS Cisco IOS: ! interface Tunnel123 ip address 1.1.1.2 255.255.255.252 tunnel source GigabitEthernet0/0/1 tunnel destination IP.OF.OB.SD

MPLS mpe0 Throughput

2019-06-05 Thread Henry Bonath
Hello, I have recently (within the past few months) turned up an MPLS PE on a 1Gbps link in a L3VPN configuration with BGP and RDomains. I'm seeing some strange throughput numbers that I am seeking to get some help understanding. Now I am currently running OpenBSD 6.4 on the particular PE, and I

Re: Modern browser for OpenBSD powerpc

2019-05-29 Thread Henry Bonath
Here's my build info for 6.5 PowerPC: pkg list: autoconf--%2.13 dbus-glib-- g++--%4.9 gcc--%4.9 gmake-- python--%2.7 py-pip-- yasm-- unzip-- zip-- And my .mozconfig: # This Source Code Form is subject to the terms of the Mozilla Public # License, v. 2.0. If a copy of the MPL was not distributed

Re: NSD & Unbound refusing to bind to IPv6 when anycast flag set ?

2019-05-17 Thread Henry Bonath
To chime in here, how I have always implemented Anycast DNS is by creating additional Loopback adapters in the OS, and then using BGP or OSPF to distribute said Loopback IPs into a routing table. Each DNS server participating in Anycast would have the same IPv4 and IPv6 address configured on that

Re: 6.5 PowerPC Packages

2019-05-13 Thread Henry Bonath
Awesome! Thank you for the status update. On Sun, May 12, 2019 at 6:33 PM Christian Weisgerber wrote: > > On 2019-05-09, Christian Weisgerber wrote: > > > The build has been running for 25 days so far, across two machines, > > and the packages will be uploaded once they are finished. > > I just

Re: 6.5 PowerPC Packages

2019-05-09 Thread Henry Bonath
Only if said trailer is Delorean-shaped. On Thu, May 9, 2019 at 3:43 PM Edgar Pettijohn wrote: > > > On May 9, 2019 10:41 AM, danieljb...@icloud.com wrote: > > > > On Thu, May 09, 2019 at 08:55:40AM -0600, Theo de Raadt wrote: > > > The real reason is because we're low on current for the flux

Re: 6.5 PowerPC Packages

2019-05-09 Thread Henry Bonath
, 2019 at 10:53 AM Christian Weisgerber wrote: > > On 2019-05-09, Henry Bonath wrote: > > > I'm not sure how many folks out there are PowerPC users, but I was > > just curious if anyone had an idea on if or when we might see those > > out in the mirrors. > > The b

Re: 6.5 PowerPC Packages

2019-05-09 Thread Henry Bonath
On Thu, 9 May 2019 at 14:34, Henry Bonath wrote: > > > > I'm not sure how many folks out there are PowerPC users, but I was > > just curious if anyone had an idea on if or when we might see those > > out in the mirrors. > > > > I also suppose in the same vein, I co

6.5 PowerPC Packages

2019-05-09 Thread Henry Bonath
I'm not sure how many folks out there are PowerPC users, but I was just curious if anyone had an idea on if or when we might see those out in the mirrors. I also suppose in the same vein, I could be learning how to pull the ports tree and build what I need that way :-) Thanks!

Re: When will be created a great desktop experience for OpenBSD?

2019-05-07 Thread Henry Bonath
I'll respond directly here as I recognize you from another mailing list we both are on :-) This is *my* desktop of choice on OpenBSD: https://sourceforge.net/p/cdesktopenv/wiki/OpenBSDBuild/ Why mess with something less tried or true? On Tue, May 7, 2019 at 8:19 AM Christopher Turkel wrote: >

Re: Controlling OSPFD based on HAProxy state

2019-04-25 Thread Henry Bonath
; I've used relayd to insert routes to a service based on a health check, and > then had ospfd advertise those routes. That might be good enough for you. > > On Fri., 19 Apr. 2019, 00:40 Henry Bonath, wrote: >> >> Does anyone suggest any clever way of controlling OSPFD based on

Controlling OSPFD based on HAProxy state

2019-04-18 Thread Henry Bonath
Does anyone suggest any clever way of controlling OSPFD based on the status of an HAProxy process? I like to use OSPFD to advertise /32 loopback IPs which HAProxy binds to for anycasted highly-available Reverse Proxy/Load Balancer services. This works great if the whole box goes down, as OSPF

Re: Reflected IBGP VPNv4 Routes overstaying their welcome

2019-04-09 Thread Henry Bonath
it. I'll spin up some test machines and report back what I find out. -Henry On Tue, Apr 9, 2019 at 5:48 AM Claudio Jeker wrote: > > On Mon, Apr 08, 2019 at 05:08:32PM -0400, Henry Bonath wrote: > > Hello, I am seeing some BGP VPNv4 routes staying populated in > > the RIB

Re: Reflected IBGP VPNv4 Routes overstaying their welcome

2019-04-08 Thread Henry Bonath
ithdraw the > routes until the > hold time has expired ... > im subject to correction on this one... but it is the behaviour I have > empirically observed > on the bgp routers that i manage > I hope this helps > Tom Smyth > > > > > > On Mon, 8 Apr 2019 at 22:11, H

Reflected IBGP VPNv4 Routes overstaying their welcome

2019-04-08 Thread Henry Bonath
Hello, I am seeing some BGP VPNv4 routes staying populated in the RIB of route-reflector clients even after dropping the originating neighbor. I'm on OpenBSD 6.4, running MPLS L3VPN. I have 2 IBGP route-reflectors, both OpenBSD 6.4. I run OSPF to distribute Loopbacks into an Area (100) We run

Re: ARP issues when using ldpd and MPLS pseudowires

2019-04-07 Thread Henry Bonath
this community! On Tue, Apr 2, 2019 at 12:24 AM Adrian Close wrote: > Hi Henry, > > Le 02/04/2019 13:39, Henry Bonath a écrit : > > It looks like a patch may have been produced, but I do not know how to > test > > it. I'm not sure if I can pull down just a small part o

Re: Add current rtable to PS1

2019-04-05 Thread Henry Bonath
ell in the specified rtable e.g.: doas routing-table 42 would run a root shell in rtable 42. -Henry On Tue, Apr 2, 2019 at 5:07 PM Pierre Emeriaud wrote: > Le mar. 2 avr. 2019 à 23:00, Henry Bonath a écrit : > > > > Hello, > > Does anyone have any suggestions as to how to

Re: Add current rtable to PS1

2019-04-02 Thread Henry Bonath
> > > > Le mar. 2 avr. 2019 à 23:00, Henry Bonath a > écrit : > > > > > > Hello, > > > Does anyone have any suggestions as to how to add the current rtable > to the > > > $PS1 prompt? > > > > > > I tend to flip back and forth

Add current rtable to PS1

2019-04-02 Thread Henry Bonath
Hello, Does anyone have any suggestions as to how to add the current rtable to the $PS1 prompt? I tend to flip back and forth between routing domains and tend to lose track of which rdomain I am currently using. I've been attempting an approach by trying to run 'ps -aux -o rtable' and using some

Re: ARP issues when using ldpd and MPLS pseudowires

2019-04-01 Thread Henry Bonath
Thanks for the follow-up Adrian, I will build one out and give it a test here tomorrow. On Mon, Apr 1, 2019 at 10:42 PM Adrian Close wrote: > Hi guys, > > Le 02/04/2019 13:18, Lee Nelson a écrit : > > This sounds very similar to the problem I mentioned over the last couple > of > > days in an

Re: ARP issues when using ldpd and MPLS pseudowires

2019-04-01 Thread Henry Bonath
the other mpw. The problem probably affects all > broadcast traffic, but so far arp is the only broadcast traffic I have > dealt with. Like you, I have to statically configure entries in the arp > tables. This hack does not scale. > > On Mon, Apr 1, 2019, 18:36 Henry Bonath wro

Re: ARP issues when using ldpd and MPLS pseudowires

2019-04-01 Thread Henry Bonath
Tom, Adrian, et al - I have posted before about this issue a few weeks ago - apparently this affects more than just Virtualbox or VMWare, I am experiencing this *EXACT* thing on Hyper-V as well. I have not tried this on metal. My network looks like this: (Customer VMs)<--->(Hyper-V OpenBSD 6.4

Re: LDPD Crashing

2019-03-03 Thread Henry Bonath
I may also configure a new VM on -current just to see if that makes any difference. On Sun, Mar 3, 2019 at 6:02 AM Stuart Henderson wrote: > > On 2019-03-03, Henry Bonath wrote: > > To elaborate, after enabling ldpd with - I have observed the > > following in the log output: >

Re: LDPD Crashing

2019-03-02 Thread Henry Bonath
]: ldp engine terminated; signal 10 Mar 3 00:58:37 mpls-gw ldpd[54245]: terminating On Sun, Mar 3, 2019 at 12:32 AM Henry Bonath wrote: > > Hello, I am still working through some issues with trying to use > OpenBSD as a Virtual MPLS PE in a multi-tenant hosted IaaS > environment. >

LDPD Crashing

2019-03-02 Thread Henry Bonath
Hello, I am still working through some issues with trying to use OpenBSD as a Virtual MPLS PE in a multi-tenant hosted IaaS environment. I am running OpenBSD 6.4 in a Hyper-V environment. I recently started seeing one of my LDP adjacencies flapping, so I replace that particular P device with a

Re: Keeping track of MAC addresses

2019-02-20 Thread Henry Bonath
Not sure if this is what you are looking for, but I like Netdisco for this. It uses SNMP to query network routers, switches, and access points, and dumps out their TCAM as well as ARP tables into a Database in order to preserve a history of not only what MAC Address was mapped to what IP Address,

Re: Multiple instances of OSPFD in different RDomains - rcctl behavior

2019-02-20 Thread Henry Bonath
, 2019 at 5:07 AM Stuart Henderson wrote: > > On 2019-02-19, Henry Bonath wrote: > > --- /var/backups/etc_rc.conf.local.current Wed Jan 16 01:30:06 2019 > > +++ /etc/rc.conf.local Fri Feb 15 13:05:17 2019 > > @@ -1,9 +1,7 @@ > > bgpd_flags= > > ldpd_flags= &

Re: Multiple instances of OSPFD in different RDomains - rcctl behavior

2019-02-19 Thread Henry Bonath
as to my approach, and if I wasn’t doing something correctly in regards to working with multiple rdomains. This is on OpenBSD 6.4 btw... Thanks! -Henry > On Feb 19, 2019, at 9:47 PM, Scott Reese wrote: > > - Original Message - >> From: "Henry Bonath" >&g

Multiple instances of OSPFD in different RDomains - rcctl behavior

2019-02-19 Thread Henry Bonath
Hello, I am seeing some strange behavior with my /etc/rc.conf.local regarding my configuration for running two instances of OSPFD in different RDomains. The way I have this configured, is I have a symlink: /etc/rc.d/ospf2d -> /etc/rc.d/ospfd so that the ospfd that runs in rdomain 2 has its own

Re: Ignore MTU on OSPFD

2019-01-15 Thread Henry Bonath
Remi, thank you for confirming. On Mon, Jan 14, 2019 at 4:03 PM Remi Locherer wrote: > On Mon, Jan 14, 2019 at 03:08:32PM -0500, Henry Bonath wrote: > > Is it possible to set to ignore MTU on OpenOSPFD? > > No, this is not supported. > > > > > For example on Cisco

Ignore MTU on OSPFD

2019-01-14 Thread Henry Bonath
Is it possible to set to ignore MTU on OpenOSPFD? For example on Cisco IOS I can add the command "ip ospf mtu-ignore" I am having some issues if the MTU is mismatched and some neighbors will be stuck in Exstart or Exchange. Other times those neighbors work fine, and it's unclear whether the MTU

bgpctl display mpls label stack of VPNv4 routes

2019-01-08 Thread Henry Bonath
Hello, Does anyone know a way to view the label stack of VPNv4 routes learned via MP-BGP? I am currently running a POC of trying out OpenBSD as a Virtual MPLS PE for some of our hosted tenants, and was finding some issues routing to certain prefixes via MPLS because packets were being sent to an

Re: OpenBGPD Route Reflector - not reflecting VPNv4 Routes

2018-12-20 Thread Henry Bonath
018 at 5:49 PM Claudio Jeker wrote: > > On Thu, Dec 20, 2018 at 04:52:34PM -0500, Henry Bonath wrote: > > Hello, I am having an issue with some route-reflectors I set up to try > > to support a new MPLS backbone. > > The majority of the MPLS Routers are Cisco IOS, with some of

OpenBGPD Route Reflector - not reflecting VPNv4 Routes

2018-12-20 Thread Henry Bonath
Hello, I am having an issue with some route-reflectors I set up to try to support a new MPLS backbone. The majority of the MPLS Routers are Cisco IOS, with some of the PE devices running OpenBSD. The Route Reflectors are OpenBSD 6.4. The route reflectors are not neighbors of each other. Here is

Re: Using /32 resp. /128 netmask for carp ips

2018-11-23 Thread Henry Bonath
To add to this, just as when using other first-hop redundancy protocols like VRRP or HSRP on a Router or Layer-3 switch, we only want the single IP address to float between the redundant hosts, and not the entire subnet. So we define the most specific subnet mask for IPv4, which is 255.255.255.255

Re: Redistributing between bgpd and ospfd

2018-10-27 Thread Henry Bonath
Claudio - One use case where I personally ran into this need in the past is in an MPLS PE-CE where OSPF is running between the Provider and Customer. (L3VPN) One would want to redistribute the Customers OSPF routes into BGP as VPNv4 prefixes into the customers VRF in the provider network. We

Re: CARP on Hyper-V VM

2018-10-27 Thread Henry Bonath
Were you able to resolve? I have a SCVMM environment and I ran into a similar issue, there is a bug in VMM 2016 with the NDIS extension but I believe its resolved in 1807. I have not been able to test, but would like to know if you had any success, as I was not able to use CARP at all in Hyper-V

Re: OpenBSD site

2018-10-27 Thread Henry Bonath
This is amazing to know, thank you! On Sat, Oct 27, 2018 at 3:11 PM wrote: > Knowing OpenBSD philosophy, you should probably NOT expect a CMS :). > > But you don't need to guess when you can check for yourself - all the > sources are available for an anonymous CVS as described in [1]. > > You

Re: "no route to host" from pkg_add

2018-08-10 Thread Henry Bonath
Also could it be that you are using IPv6, not IPv4? (and your IPv6 is missing its gateway) If the IPv6 gateway is bad/missing you'll get that "no route to host" message. On Fri, Aug 10, 2018 at 4:31 PM, Stuart Henderson wrote: > On 2018-08-07, traveller wrote: > > After OpenBSD, one too many

Re: IPv6 Static Configuration Gateway Address - Link Local or Global Unicast?

2018-07-18 Thread Henry Bonath
I have always used the Router's global address when configuring a static route or static default gateway. I have seen routing protocols like OSPF/BGP/etc. use link-local addresses for nexthop, but when statically configuring, I've always used the global address that is located within the same

Re: Coming from FreeBSD, lower networking performance

2018-07-13 Thread Henry Bonath
Have you looked into IPerf? https://iperf.fr/ This is what I typically use for testing network throughput. Downloading a file is a bit more complex and involves things like the source server/latency/etc. as well as disk performance. (I know a 100MB file isnt much but still...) IPerf has a lot of