Bridge performance with vlans on ix(4) and protected ports ) diagnostic tips request

2020-05-06 Thread Tom Smyth
Hello, I'm running 6.6 Stable amd64 on an 4 Core VM with ix(4) PCI-E SRIOV attached Nics Im seeing performance of about 450Mb/s throughput it bridges /aggregates about 90 vlans into one physical 10G port (and isolates them (with all the vlans in the bridge and in the same protection im seeing

Re: Optimizing pf.conf

2020-05-06 Thread Peter Nicolai Mathias Hansteen
> 6. mai 2020 kl. 22:00 skrev Lars Bonnesen : > > Is it no longer important to group block/pass in/out for speed optimization? > > I see many "modern" pf.conf where everything is mixed more or less randomly My advice would be to write your pf.conf in a way that makes sense in your

Re: wireguard on i386

2020-05-06 Thread Aisha Tammy
On 5/6/20 12:22 PM, Stuart Henderson wrote: > On 2020-05-06, infoomatic wrote: >> Hi, >> >> I realized wireguard is not available as binary package for i386. Since >> this is my only 32bit machine I would setup 32bit VM to build the >> package. Is it possible to compile it from ports for 32bit?

Re: Optimizing pf.conf

2020-05-06 Thread Theo de Raadt
pfctl has an ruleset optimizer built in, which handles most of that. So, it is best if you write rules in a way that makes sense. Lars Bonnesen wrote: > Is it no longer important to group block/pass in/out for speed optimization? > > I see many "modern" pf.conf where everything is mixed more

Optimizing pf.conf

2020-05-06 Thread Lars Bonnesen
Is it no longer important to group block/pass in/out for speed optimization? I see many "modern" pf.conf where everything is mixed more or less randomly Regards, Lars.

Re: wireguard on i386

2020-05-06 Thread Aisha Tammy
On 5/6/20 9:58 AM, infoomatic wrote: > Hi, > > I realized wireguard is not available as binary package for i386. Since > this is my only 32bit machine I would setup 32bit VM to build the > package. There are two packages wireguard-tools and wireguard-go Both have been recently updated to work on

support

2020-05-06 Thread Chris Petrik
0 C USA P Mississippi T Gulfport Z 39501 O Petrik Consulting I Chris Petrik A 1610 Thornton, Ave M ch...@cpettington.com U http://www.cpettington.com/ B 2282650091 X N BSD based consulting in the Mississippi area. We specialize in using OpenBSD as our base go-to Operating System for all services

Re: one-character expansion in shell

2020-05-06 Thread Ottavio Caruso
On Wed, 6 May 2020 at 14:25, Rudolf Sykora wrote: > > Hello list, > > > is this an expected behaviour? > > odin$ ls v?k* > ls: v?k*: No such file or directory > odin$ ls v??k* > výkres.1.pdfvýkres.2.pdfvýkres.5.pdfvýkres.8.pdf > výkres.10.pdf výkres.3.pdfvýkres.6.pdf

Re: 10Gbps X520 network adapter only passing 3.5Gbps

2020-05-06 Thread Jordan Geoghegan
On 2020-05-06 04:04, Stuart Henderson wrote: On 2020-05-06, Jordan Geoghegan wrote: On 2020-05-04 06:42, Kalle Kadakas wrote: Greetings OpenBSD community, I am running into severe bandwidth limitations whilst passing traffic through an OpenBSD firewall. The NIC in use is an Intel 10Gb

Re: wireguard on i386

2020-05-06 Thread Stuart Henderson
On 2020-05-06, infoomatic wrote: > Hi, > > I realized wireguard is not available as binary package for i386. Since > this is my only 32bit machine I would setup 32bit VM to build the > package. Is it possible to compile it from ports for 32bit? (or is the > missing package a sign that it's not

Re: OSPF lsa_check issue

2020-05-06 Thread Claudio Jeker
On Wed, May 06, 2020 at 03:23:06PM +0100, Richard Chivers wrote: > Hi, > > Thanks so much for the diff, it appears to have resolved the issue. > > We are now trying to establish whether we need the fix widely deployed or > only on the box that originates with the large LSA updates, pushing it

Re: OSPF lsa_check issue

2020-05-06 Thread Richard Chivers
Hi, Thanks so much for the diff, it appears to have resolved the issue. We are now trying to establish whether we need the fix widely deployed or only on the box that originates with the large LSA updates, pushing it over the 1500mtu. We are going to run some tests, but our expectation is that

Re: one-character expansion in shell

2020-05-06 Thread Philipp Buehler
Am 06.05.2020 15:54 schrieb Ingo Schwarze: Your misunderstandiing is that file names consist of characters. They do not. They consist of bytes, and to match two bytes, you need two question marks. One can hold for the OP; the ksh(1) manpage talks about "characters" in 'File name patterns'

wireguard on i386

2020-05-06 Thread infoomatic
Hi, I realized wireguard is not available as binary package for i386. Since this is my only 32bit machine I would setup 32bit VM to build the package. Is it possible to compile it from ports for 32bit? (or is the missing package a sign that it's not available for 32bit architecture?) thanks,

Re: one-character expansion in shell

2020-05-06 Thread Ingo Schwarze
Hi Rudolf, Rudolf Sykora wrote on Wed, May 06, 2020 at 03:25:09PM +0200: > is this an expected behaviour? Yes, that is expected behaviour. > odin$ ls v?k* > ls: v?k*: No such file or directory > odin$ ls v??k* [ some file names containing two-byte UTF-8 sequences ] > odin$ locale The locale

one-character expansion in shell

2020-05-06 Thread Rudolf Sykora
Hello list, is this an expected behaviour? odin$ ls v?k* ls: v?k*: No such file or directory odin$ ls v??k* výkres.1.pdfvýkres.2.pdfvýkres.5.pdfvýkres.8.pdf výkres.10.pdf výkres.3.pdfvýkres.6.pdfvýkres.9.pdf výkres.11.pdf výkres.4.pdfvýkres.7.pdf odin$ locale LANG=

Re: SpeedTest-cli results accuracy ?

2020-05-06 Thread Stuart Henderson
On 2020-05-06, Judah Kocher wrote: > speedtest-cli is horribly inaccurate in my experience. I used it when I > first started using OpenBSD as a router and spent mor etime than I care > to admit "troubleshooting" before realizing I was getting the correct > speeds on devices on the network.

Re: 10Gbps X520 network adapter only passing 3.5Gbps

2020-05-06 Thread Stuart Henderson
On 2020-05-06, Jordan Geoghegan wrote: > > > On 2020-05-04 06:42, Kalle Kadakas wrote: >> Greetings OpenBSD community, >> >> I am running into severe bandwidth limitations whilst passing traffic >> through an OpenBSD firewall. >> The NIC in use is an Intel 10Gb 2-port X520 adapter from which I

Re: 10Gbps X520 network adapter only passing 3.5Gbps

2020-05-06 Thread Kalle Kadakas
Thank you Jordan for looking into this! I ran the test with tcpbench for 2min (pf+isakmpd+lacp) and the results were pretty much the same, a bit better: Peak Mbps: 3588.227 Avg Mbps: 3533.040 Cannot really run all 4 tests right away as this is a production node and I currently do not have any

macppc wsconsctl screen brightness

2020-05-06 Thread rgc
misc@ i've been following 67-beta ... and just noticed this since #711. it is possible this issue occured earlier. i have no idea if display.brightness worked on 6.6-stable macppc.html shows i can do this via "wsconsctl -w XXX". ** note that wsconsctl doesn't have a "-w" option so macppc.html

Re: OSPF lsa_check issue

2020-05-06 Thread Claudio Jeker
On Wed, May 06, 2020 at 09:33:11AM +0100, Richard Chivers wrote: > Hi, > > Some progress has been made, we can now replicate this consistently and it > appears that whenever a LS update exceeds the mtu (1500) we get this issue > of lsa_check bad age. > > When running with the diff Claudio sent

Re: OSPF lsa_check issue

2020-05-06 Thread Richard Chivers
Hi, Some progress has been made, we can now replicate this consistently and it appears that whenever a LS update exceeds the mtu (1500) we get this issue of lsa_check bad age. When running with the diff Claudio sent we start getting a bunch of errors complaining about: recv_ls_update: bad

Re: 10Gbps X520 network adapter only passing 3.5Gbps

2020-05-06 Thread Jordan Geoghegan
On 2020-05-04 06:42, Kalle Kadakas wrote: Greetings OpenBSD community, I am running into severe bandwidth limitations whilst passing traffic through an OpenBSD firewall. The NIC in use is an Intel 10Gb 2-port X520 adapter from which I would hope to pass through at least 7Gbps+, yet the