Re: Cron running at 99% CPU for seemingly no reason

2022-05-15 Thread Claudio Jeker
On Sun, May 15, 2022 at 12:06:33PM +0200, Stephan Mending wrote: > Hi *, > I've got a system running -current that keeps crashing on me every couple of > days. > Output of ddb: > > Connected to /dev/cuaU0 (speed 115200) > > ddb{0}> show panic > the kernel did not panic > ddb{0}> show uvm >

Re: Cron running at 99% CPU for seemingly no reason

2022-05-15 Thread Claudio Jeker
On Sun, May 15, 2022 at 12:06:33PM +0200, Stephan Mending wrote: > Hi *, > I've got a system running -current that keeps crashing on me every couple of > days. > Output of ddb: > > Connected to /dev/cuaU0 (speed 115200) > > ddb{0}> show panic > the kernel did not panic > ddb{0}> show uvm >

Re: OpenBGPd: fatal in RDE: aspath_get: Cannot allocate memory

2022-04-04 Thread Claudio Jeker
On Tue, Mar 29, 2022 at 09:53:56AM +0200, Laurent CARON wrote: > Hi, > > I'm happily running several OpenBGPd routers (Openbsd 7.0). > > After having applied the folloxing filters (to blackhole traffic from > certain countries): > > include "/etc/bgpd/deny-asn.ru.bgpd" > include

Re: OpenBGPd: fatal in RDE: aspath_get: Cannot allocate memory

2022-04-04 Thread Claudio Jeker
On Mon, Apr 04, 2022 at 03:14:35PM +0200, Laurent CARON wrote: > > Le 01/04/2022 à 14:38, Claudio Jeker a écrit : > > > > The numbers look reasonable with maybe the exception of prefix and BGP > > path attrs. Unless this system is pushing or pulling lots of full fe

Re: OpenBGPd: fatal in RDE: aspath_get: Cannot allocate memory

2022-04-01 Thread Claudio Jeker
On Thu, Mar 31, 2022 at 09:06:05PM +0200, Laurent CARON wrote: > Le 29/03/2022 à 12:10, Claudio Jeker a écrit : > > I doubt it is the filters. You run into some sort of memory leak. Please > > monitor 'bgpctl show rib mem' output. Also check ps aux | grep bgpd output > >

Re: OpenBGPd: fatal in RDE: aspath_get: Cannot allocate memory

2022-03-29 Thread Claudio Jeker
On Tue, Mar 29, 2022 at 09:53:56AM +0200, Laurent CARON wrote: > Hi, > > I'm happily running several OpenBGPd routers (Openbsd 7.0). > > After having applied the folloxing filters (to blackhole traffic from > certain countries): > > include "/etc/bgpd/deny-asn.ru.bgpd" > include

Re: httpd HTTP/2 and HTTP/3 support

2022-01-03 Thread Claudio Jeker
On Fri, Dec 31, 2021 at 09:36:54AM -, Stuart Henderson wrote: > On 2021-12-31, Georg Pfuetzenreuter wrote: > > Hi, > > I searched but couldn't find any recent threads. > > Does httpd support HTTP/2? > > No. > > > Is support for the upcoming HTTP/3 planned? > > guessing but I think this

Re: Profiling ifconfig

2021-12-16 Thread Claudio Jeker
On Thu, Dec 16, 2021 at 03:55:43PM +0800, Vladimir Nikishkin wrote: > Hello, everyone > > Recently I had a problem: my system is losing network connectivity, > although the interface (vio0 on KVM) seemed up. Restarting the > connection with `ifconfig vio0 down` and `ifconfig vio0 up` restores the

Re: bgpd, announce to ibgp from 2 routers, prefixes only show up from 1

2021-11-30 Thread Claudio Jeker
On Mon, Nov 29, 2021 at 10:38:21PM +0100, Sebastian Benoit wrote: > Stuart Henderson(s...@spacehopper.org) on 2021.11.13 00:11:08 +: > > I have a pair of -current routers running bgpd (let's call them rtr-a > > and rtr-b) on a subnet which also has some vpn gateways and firewalls. > > > >

Re: Put non-NULL pledge abort in the man page

2021-11-25 Thread Claudio Jeker
On Thu, Nov 25, 2021 at 04:55:23AM -0600, Luke Small wrote: > I ran ktrace. Kdump said the last thing it did was try to load > /usr/libexec/ld.so > > To main(), before the unveil pledge is dropped, I added: > > if (unveil("/usr/libexec/", "rx") == -1) > err(1, "unveil,

Re: Dynamic routing and REJECT,LLINFO,CLONED routes

2021-11-07 Thread Claudio Jeker
On Sun, Nov 07, 2021 at 12:46:43PM +0100, Denis Fondras wrote: > I came up with this diff to overcome my problem. > > Index: rtable.c > === > RCS file: /cvs/src/sys/net/rtable.c,v > retrieving revision 1.75 > diff -u -p -r1.75

Re: Asyncronous IO

2021-11-04 Thread Claudio Jeker
On Wed, Nov 03, 2021 at 03:37:01PM +, cho...@jtan.com wrote: > I program on OpenBSD and am writing a library which presents an API > for IO. POSIX defines an API[*] for asyncronous IO and I would like > my code to support it but this API is unavailable in OpenBSD. > > Is the lack intentional

Re: httpd(8) - Internal Server error (500) on invalid request

2021-10-21 Thread Claudio Jeker
On Thu, Oct 21, 2021 at 04:38:43PM +0200, Sebastian Benoit wrote: > J. K.(openbsd.l...@krottmayer.com) on 2021.10.21 14:10:16 +0200: > > Another question, to httpd(8). Tried the following query. > > Used an invalid HTTP Version number (typo). > > > > $ telnet 10.42.42.183 80 > > [Shortened] > >

Re: httpd(8) - Internal Server error (500) on invalid request

2021-10-21 Thread Claudio Jeker
On Thu, Oct 21, 2021 at 01:21:33PM +0200, Sebastian Benoit wrote: > J. K.(openbsd.l...@krottmayer.com) on 2021.10.21 11:55:47 +0200: > > Hi, > > > > I don't know if this is a real issue from OpenBSD's httpd(8). > > Tried some requests to httpd(8) for the purpose of education. > > > > Simple

Re: problems with outbound load-balancing (PF sticky-address for destination IPs)

2021-09-29 Thread Claudio Jeker
e and 25% of your traffic will be dropped. This is another advantage of multipath routing. Cheers -- :wq Claudio > Thanks for your time, Andy. > > On Wed, Sep 29, 2021 at 5:21 PM Claudio Jeker > wrote: > > > On Wed, Sep 29, 2021 at 02:17:59PM +1000, Andrew Lemin wrote: > &g

Re: problems with outbound load-balancing (PF sticky-address for destination IPs)

2021-09-29 Thread Claudio Jeker
On Wed, Sep 29, 2021 at 02:17:59PM +1000, Andrew Lemin wrote: > I see this question died on its arse! :) > > This is still an issue for outbound load-balancing over multiple internet > links. > > PF's 'sticky-address' parameter only works on source IPs (because it was > originally designed for

Re: Blog comparing open source BGP stacks

2021-08-25 Thread Claudio Jeker
On Wed, Aug 25, 2021 at 02:01:26PM +0200, Kristjan Komlosi wrote: > On 24. 08. 21 21:59, Laura Smith wrote: > > Would be interesting to hear comments from the community on this comparison > > : https://elegantnetwork.github.io/posts/followup-measuring-BGP-stacks/ > > > > N.B. For the record,

Re: WireGuard host crashes roughly every week

2021-08-04 Thread Claudio Jeker
On Wed, Aug 04, 2021 at 08:36:07PM +1000, Matt Dunwoodie wrote: > On Tue, 3 Aug 2021 13:02:15 -0500 > "Matt P." wrote: > > > Hi Stuart! > > > > Your advice lead me to discover, the issue happens only with the > > "PersistantKeepalive = 25" option I had enabled on each wg-quick > > peer. Looks

Re: iked choosing the wrong policy?

2021-07-27 Thread Claudio Jeker
On Tue, Jul 27, 2021 at 07:32:09AM -, Stuart Henderson wrote: > On 2021-07-27, Vladimir Nikishkin wrote: > > Hello, everyone. > > > > This is my iked.conf: > > > > ``` > > ikev2 "for-phone" passive esp \ > > from any to 10.0.3.2/32 \ > > local egress peer any \ > ... > >

Re: DHCP non-issues

2021-07-20 Thread Claudio Jeker
On Tue, Jul 20, 2021 at 08:53:03AM -, Stuart Henderson wrote: > On 2021-07-19, jungle Boogie wrote: > > On Mon, 19 Jul 2021 at 04:48, Christian Weisgerber > > wrote: > >> > >> Look guys, it's simple. > >> > >> If you want IPv6 (SLAAC) autoconfiguration, you set "inet6 autoconf" > >> for

Re: VLANs isolation

2021-07-13 Thread Claudio Jeker
On Tue, Jul 13, 2021 at 11:34:28AM +0200, Radek wrote: > Hello, > I'm going to build a router with +40 vlans. > I need to block access from every vlan to each other (and then enable traffic > between certain vlans as needed). > > How can I do this? Is there any one liner pf block rule to do

Re: rpki-client and BLACKHOLE routes

2021-06-23 Thread Claudio Jeker
On Wed, Jun 23, 2021 at 11:40:25AM +0200, Hrvoje Popovski wrote: > Hi all, > > fist of all, thank you for rpki-client, it's so easy to use it and to > get the job done. > I'm playing with rpki-client and denying ovs invalid statement and I've > seen that with default ovs config statement (deny

Re: EACCES of UDP packet

2021-06-22 Thread Claudio Jeker
On Tue, Jun 22, 2021 at 04:48:26PM +0800, Siegfried Levin wrote: > > Why have you chosen to hide information that may be useful in debugging > > your problem? > > I’m truly sorry for the inconvenience but I do have some concerns of security > and privacy. I confirm it is not a broadcast address

Re: Prometheus on OpenBSD - does it work?

2021-06-15 Thread Claudio Jeker
On Tue, Jun 15, 2021 at 04:24:08PM +0200, Julien Pivotto wrote: > Hello, > > I am a Prometheus maintainer and we have received a bug regarding > Prometheus - prometheus would no longer work on OpenBSD since we > introduced MMAP: > > https://github.com/prometheus/prometheus/issues/8877 >

Re: Howto measure pps at forwarding plane

2021-06-10 Thread Claudio Jeker
On Thu, Jun 10, 2021 at 09:23:03AM -, Stuart Henderson wrote: > On 2021-06-10, Valdrin MUJA wrote: > > Hello, > > > > I'm trying to figure out how much packets are being forwarded on my OpenBSD > > firewall. > > Here a small script i wrote. > > > > > > #!/bin/sh > > > > > > VAL1=`netstat -s

Re: openbgpd "depend on"

2021-06-09 Thread Claudio Jeker
On Wed, Jun 09, 2021 at 09:57:32AM +0200, open...@kene.nu wrote: > Hello, > > Just a question and maybe a suggestion. I am implementing a few DCs that > use vxlan symmetric routing and hence, layer2 redundancy protocols like > CARP (and VRRP/HSRP) do not work as intended due to evpn layer2 being

Re: pf, relayd, TCP keep alive and NAT, oh my!

2021-06-01 Thread Claudio Jeker
On Tue, Jun 01, 2021 at 10:25:38AM +1000, Cameron Simpson wrote: > Can I enforce or implement TCP keep alives on a TCP stream via my > firewall? > > Background: > > I've got a client with an OpenBSD firewall and a Telstra NBN modem as > their modem. > > Their IMAP server is upstream in the

Re: openrsync manpage error

2021-05-17 Thread Claudio Jeker
lled. I also have rsync installed on most of my systems so I did not notice this. Right now people should use the rsync package since the openrsync is not enough compatible to work well in all scenarios. > > On 14-May-2021, at 12:02 PM, Claudio Jeker wrote: > > > > On Fri, May 1

Re: openrsync manpage error

2021-05-14 Thread Claudio Jeker
On Fri, May 14, 2021 at 12:44:45AM +0300, Irshad Sulaiman wrote: > Hi > > I have modified error in openrsync(1) manpage in Example section isn’t > that ‘openrsync -t' instead of 'rsync -t ‘ > And without --rsync-path= it gives an following error 'openrsync: error: > unexpected end of file’ I

Re: pf firewall bridge0 vether0 blocks DHCP for bridge interfaces connected to Windows

2021-03-10 Thread Claudio Jeker
On Wed, Mar 10, 2021 at 08:40:55PM +0100, da...@hajes.org wrote: > Hi, > > I did set up OpenBSD router/firewall on PC Engines APU4d4 box. > > First interface is WAN that connects to Internet. > > Remaining three interfaces are bridged with bridge0 via vether0. > > firewall doesn't block

Re: iSCSI LUN mount on boot

2021-02-20 Thread Claudio Jeker
On Fri, Feb 19, 2021 at 07:48:25PM -0500, Ashton Fagg wrote: > I'm curious as to what other folks are doing for mounting iSCSI volumes > at boot time. I've successfully configured iscsid, and mounting the > volume manually works as expected. > > I found this article [1] which suggests that

Re: Unknown process modifying routing table

2021-02-06 Thread Claudio Jeker
On Sat, Feb 06, 2021 at 02:16:20PM +0100, Otto Moerbeek wrote: > On Sat, Feb 06, 2021 at 12:18:40PM +, James wrote: > > > I've disabled my VPN on the machine as well as dhclient, connecting via a > > fixed static IP address and DNS servers. My routing table is still being > > modifed by PID 0

Re: Ask ospfd

2021-02-01 Thread Claudio Jeker
On Tue, Feb 02, 2021 at 12:06:37PM +0700, Adiwangsa Kusumah wrote: > Dear All, > > I have topology as below: > > UP1 UP2 > \ / > \ / > OBSD6.6 > /\ > /\ > OSPF1OSPF2 > > > I use openbgpd to upstream and openospfd to internal > I

Re: ospf on wg(4)

2021-01-30 Thread Claudio Jeker
On Sat, Jan 30, 2021 at 09:14:50AM +, Olivier Cherrier wrote: > On Fri, Jan 29, 2021 at 10:32:45PM +0100, bast...@durel.org wrote: > > > > Hello Bastien, > > > It is possible, I use it myself. You have to allow multicast address on > > wg(4) interface(s): > > 225.0.0.5 for all OSPF routers

Re: bgpd not including MED attribute on updates

2021-01-28 Thread Claudio Jeker
2 will not pass the MED on to R2 because the system does not touch the MED and therefor bgpd considers the received MED from rr1 and rr2 to have originated from outside and so it is excluded from UPDATES to EBGP peers. You should add a 'maych from ibgp set med +0' rule which makes MED learned via IBGP to be cons

Re: bgpd not including MED attribute on updates

2021-01-28 Thread Claudio Jeker
On Thu, Jan 28, 2021 at 12:41:29PM +0100, open...@kene.nu wrote: > Hello, > > I am experiencing this on 6.8, fully syspatched. > > root@R1():~ # uname -a > OpenBSD R1 6.8 GENERIC.MP#4 amd64 > > The problem is that R1 sends updates with MED set to 0 even though I expect > it not to be. Upon

Re: osp6d p2p send_ls_update

2021-01-06 Thread Claudio Jeker
On Tue, Dec 29, 2020 at 06:39:36PM +0200, Kapetanakis Giannis wrote: > Hi, > > I've changed today my config from broadcast to p2p for both ipv4 and ipv6. > > In ospf6d I get this quite often: > > Dec 29 17:39:00 ospf6d[40695]: send_packet: error sending packet on interface > vlanX: Network is

Re: osp6d p2p send_ls_update

2020-12-29 Thread Claudio Jeker
On Tue, Dec 29, 2020 at 06:39:36PM +0200, Kapetanakis Giannis wrote: > Hi, > > I've changed today my config from broadcast to p2p for both ipv4 and ipv6. > > In ospf6d I get this quite often: > > Dec 29 17:39:00 ospf6d[40695]: send_packet: error sending packet on interface > vlanX: Network is

Re: OSPF and CARP interfaces

2020-12-22 Thread Claudio Jeker
On Tue, Dec 22, 2020 at 02:04:27PM +0100, open...@kene.nu wrote: > Hello, > I am seeing what I deem to be unexpected behavior with ospfd and depending > on carp interfaces. > Running 6.8 with latest patches applied on all three routers. > > # uname -a > OpenBSD extfw1.lab.kambi.com 6.8

Re: RISC-V and OpenBSD

2020-12-09 Thread Claudio Jeker
On Wed, Dec 09, 2020 at 05:30:48PM +0200, Mihai Popescu wrote: > Would it be interesting from the OpenBSD point of view [1] ? > > [1] http://www.micromagic.com/news/RISCv-Fastest_PR.pdf No, this is just PR. We need HW to run on. -- :wq Claudio

Re: APU4 hardware network interfaces tied together

2020-11-16 Thread Claudio Jeker
On Mon, Nov 16, 2020 at 06:37:50PM -0700, John McGuigan wrote: > On Mon, Nov 16, 2020, 6:05 PM Stuart Henderson wrote: > > > > > bridge (and theoretically switch but I never got it to do anything > > useful) make a group of ports act like a network switch (maybe with > > filtering between the

Re: Impact of 002_icmp6.patch

2020-10-30 Thread Claudio Jeker
On Fri, Oct 30, 2020 at 11:15:31AM +0100, js-openbsd-m...@webkeks.org wrote: > > Am 30.10.2020 um 01:28 schrieb Theo de Raadt : > > > > js-openbsd-m...@webkeks.org wrote: > > > >> I just saw > >> https://ftp.openbsd.org/pub/OpenBSD/patches/6.8/common/002_icmp6.patch.sig, > >> however, it's

Re: Primepower 250 vs Sunfire v215

2020-09-20 Thread Claudio Jeker
On Sun, Sep 20, 2020 at 08:00:45PM +0300, Kihaguru Gathura wrote: > > The Primepower is bigger and needs more power but if you find a box with > > good CPUs and memory it should run faster than a V215 > > How did the performance of the PrimePower 250 SCSI drives compare to Sun > Fire V215 SAS

Re: Primepower 250 vs Sunfire v215

2020-09-20 Thread Claudio Jeker
On Sun, Sep 20, 2020 at 09:02:55AM +0300, Kihaguru Gathura wrote: > Hi, > > For those who have experience with older Sparc machines, Which hardware > offers better reliability/stability? > > Fujitsu Primepower 250 or Sun fire V215. > Depends mostly on how well they were handled. Also if they

Re: pf, send(2) and EACCES

2020-08-28 Thread Claudio Jeker
On Fri, Aug 28, 2020 at 11:40:17AM -0400, Daniel Jakots wrote: > On Fri, 28 Aug 2020 16:06:48 +0200, Sebastien Marie > wrote: > > > - generate lot of postgresql access. from postgresql thread, the > > statement seems to be a SELECT, so it would be fine to ran in loop > > (hopping no cache and

Re: bgpd config advice needed

2020-08-24 Thread Claudio Jeker
On Mon, Aug 24, 2020 at 04:36:10PM +, Laura Smith wrote: > Hi, > > Let's say I've got a scenario where I've got transit ISPs and peering > connections. > > My general config rule is that I use med to prioritise peering over transit > (because localpref is too high up in the BGP selection

Re: rtables and kernel routes

2020-08-21 Thread Claudio Jeker
On Fri, Aug 21, 2020 at 08:45:36AM +0200, open...@kene.nu wrote: > Hello, > > I am seeing rather strange, or maybe expected, behaviour. I utilise > rtables to send internal traffic towards the internet via a default > route in rtable 2. The traffic is punted to rtable 2 with pf. The > strangeness

Re: CPU usage of httpd+slowcgi

2020-07-27 Thread Claudio Jeker
On Mon, Jul 27, 2020 at 02:54:25PM +0100, Stuart Henderson wrote: > Replying back on-list, I don't do support-type mails off-list, and other > people know more about sparc64 hardware than me. > > On 2020/07/26 22:38, Kihaguru Gathura wrote: > > Hi Stuart, > > > > For legacy, single-core CPU's

Re: OpenBGPD fatal in RDE: rde_dispatch_imsg_session: imsg_get error: Cannot allocate memory

2020-06-30 Thread Claudio Jeker
On Tue, Jun 30, 2020 at 10:23:07AM +0200, Laurent CARON wrote: > Hi, > > > I'm running a pretty busy OpenBGPd router (~250 bgp sessions) with 4 IPv4 > and 4 IPv6 full views, plus a few IX sessions. > > > # bgpctl show rib mem > RDE memory statistics >     820983 IPv4 unicast network entries

Re: Convert ffs1 to ffs2?

2020-05-20 Thread Claudio Jeker
On Wed, May 20, 2020 at 11:30:00AM +0300, Михаил Попов wrote: > > "Possible" is irrelevant. Lots of things are _possible_ but not done. > > Then only rsyncing? There is also dump and restore. > Why not adding at least one of a well tested journaled FS like XFS to OpenBSD? > Is XFS too fat and

Re: RT_TABLEID_MAX behavior changed?

2020-05-19 Thread Claudio Jeker
t is 8 bits instead of 16 in earlier releases. > > > > > > > > пн, 18 мая 2020 г. в 11:51, Bars Bars : > > > >> Hi, Claudio > >> > >> I mean these in sys/socket.h > >> /* > >> * Maximum number of alternate routing tables > >>

Re: RT_TABLEID_MAX behavior changed?

2020-05-18 Thread Claudio Jeker
On Sun, May 17, 2020 at 10:16:28PM +0300, Bars Bars wrote: > it seems the things work just when i rebuild userland completely (im pretty > sure i did it only with compiling kernel in past, correct me if i wrong?). > > btw, questions for the Devs. > Looking at the cvs history, i really worried

Re: OSPF lsa_check issue

2020-05-06 Thread Claudio Jeker
On Wed, May 06, 2020 at 03:23:06PM +0100, Richard Chivers wrote: > Hi, > > Thanks so much for the diff, it appears to have resolved the issue. > > We are now trying to establish whether we need the fix widely deployed or > only on the box that originates with the large LSA updates, pushing it

Re: OSPF lsa_check issue

2020-05-06 Thread Claudio Jeker
On Wed, May 06, 2020 at 09:33:11AM +0100, Richard Chivers wrote: > Hi, > > Some progress has been made, we can now replicate this consistently and it > appears that whenever a LS update exceeds the mtu (1500) we get this issue > of lsa_check bad age. > > When running with the diff Claudio sent

Re: OSPF lsa_check issue

2020-05-05 Thread Claudio Jeker
On Tue, May 05, 2020 at 10:51:40AM +0200, Claudio Jeker wrote: > On Tue, May 05, 2020 at 09:07:34AM +0100, Richard Chivers wrote: > > After some more work this morning we have managed to extract the > > information from tcpdump of the full LS-Update packet, we couldn't se

Re: OSPF lsa_check issue

2020-05-05 Thread Claudio Jeker
On Tue, May 05, 2020 at 09:07:34AM +0100, Richard Chivers wrote: > After some more work this morning we have managed to extract the > information from tcpdump of the full LS-Update packet, we couldn't see it > on bsd, but running: > > tcpdump -v -r ~/Downloads/ospf.pcap on osx did the trick. > >

Re: bad AGGREGATOR, AS 0 not allowed

2020-04-29 Thread Claudio Jeker
On Wed, Apr 29, 2020 at 05:45:30PM +0200, Marko Cupać wrote: > Hi, > > on 6.6-RELEASE amd64, (sys)patched up to 019_smtpd_exec, I am noticing > these: > > Apr 29 17:23:33 bgp1 bgpd[42338]: neighbor IP.ADD.RE.SS (desc): bad > AGGREGATOR, AS 0 not allowed, attribute discarded > > My bgpd.conf is

Re: Ospfd default route query

2020-04-27 Thread Claudio Jeker
> > Is that the best/general practise in general? I would use a -blackhole route (no need to send out ICMP messages) but yes, that is what I normally use in such a case (at least for the DFZ). > Cheers > > Richard > > On Mon, Apr 27, 2020 at 8:25 AM Claudio Jeker >

Re: Ospfd default route query

2020-04-27 Thread Claudio Jeker
On Sun, Apr 26, 2020 at 08:44:42PM +0100, Richard Chivers wrote: > Not sure how I missed the clear information in the man page... > > "If set to default, a default route pointing to this router will be > announced over OSPF" > > It seems I am just having an issue and it should work as I

Re: socket I/O on openbsd

2020-04-22 Thread Claudio Jeker
On Tue, Apr 21, 2020 at 10:48:46PM -0300, Gustavo Rios wrote: > Dear gentleman, > > i have the an ANSI C code that do the following: > > 0. open a socket > 1. write data to the socket > 2. close the writing end of the socket > 3. read data from the socket > 4. close the read end of the socket >

Re: BGPD announce deprecation query

2020-04-19 Thread Claudio Jeker
On Sun, Apr 19, 2020 at 08:07:48AM +0100, Richard Chivers wrote: > Hi, > > Just been building a copy of our production system in vagrant to test > upgrading to the latest version, in order to resolve an issue we were > having. > > In our current config we have: > > group "core" { >

Re: MultiPath / ADD_PATH for bgpd

2020-04-16 Thread Claudio Jeker
On Wed, Apr 15, 2020 at 08:16:14PM +0100, Richard Chivers wrote: > Hi, > > Just wondering if anyone can help. > > I saw back in late 2018 that there were some initial plans for ADD_PATH and > Multipath in bgpd, it was in a list on a slide right after the portable > version.

Re: OSPF seems to stops processing updates

2020-04-13 Thread Claudio Jeker
On Mon, Apr 13, 2020 at 02:08:31PM +0200, Remi Locherer wrote: > On Mon, Apr 13, 2020 at 12:05:10PM +0100, Richard Chivers wrote: > > Thanks. Please see my comments below. > > > > On Mon, 13 Apr 2020, 10:18 Remi Locherer, wrote: > > > > > Hi Richard, > > > > > > On Mon, Apr 13, 2020 at

Re: BGP and carp slaves

2020-04-02 Thread Claudio Jeker
On Thu, Apr 02, 2020 at 11:34:21AM +0200, Luca Bodini wrote: > Hi folks, > > I’m just having a strange issue using OpenBSD 6.6 and BGP . > I have two OpenBSD firewalls with a carp configuration, let’s suppose the > shared IP is 10.10.10.100, and I am able to announce 10.10.10.100/32 via BGP. >

Re: routing with DMZ between internal and external firewall

2020-03-16 Thread Claudio Jeker
On Mon, Mar 16, 2020 at 09:49:30AM +0100, pebwindkraft wrote: > Hi, > > I have a question concerning static routes and default gateways for a DMZ > setup, with internal and external firewall. > A DNS in the DMZ shall be used from internal machines, and later a http > proxy from internal and

Re: size of size_t (diff angle)

2020-02-27 Thread Claudio Jeker
On Thu, Feb 27, 2020 at 02:07:36PM +0100, zeurk...@volny.cz wrote: > Haai, > > "Claudio Jeker" wrote: > > This has not much to do with OpenBSD. > > On the contrary: these issues touch the fundaments of UNIX programming. > > > As for OpenBSD, it o

Re: size of size_t (diff angle)

2020-02-27 Thread Claudio Jeker
This has not much to do with OpenBSD. As for OpenBSD, it only runs on two types of machines: ILP32 and I32LP64. Any other type of machine that is not covered by these two types will not run OpenBSD. In both cases size_t is defined as unsigned long which is the same as uintptr_t and the same size

Re: ahci issue corebooted X220 does not recognise usb or stata

2020-02-21 Thread Claudio Jeker
On Wed, Feb 19, 2020 at 02:34:40PM +0100, Thomas Meulendijks wrote: > Hi OpenBSD Mailing list, > > I am trying to install Openbsd via the install66.fs on a Thinkpad X220 > [amd64] with coreboot. > I have the problem that it does not recognize any USB or SATA device may it > be storage or

Re: Fwd: tap(4) performance tuning on (amd64)

2020-01-21 Thread Claudio Jeker
On Tue, Jan 21, 2020 at 09:17:20PM +, Tom Smyth wrote: > in testing tap(4) performance on the same box with the following config > using claudios userlandbridge (tbridge) in between two tap interfaces > each tap was also added their own standard bridge(4) along with 1 physical > interface. >

Re: tap(4) performance tuning on (amd64)

2020-01-20 Thread Claudio Jeker
s the usage message and gives an errorlevel of 1 > every time use the -k or -t or -s or -p arguments see terminal > conversation below > Shit, I added a last minute check and as usual introduced a bug. Line 189 change if (ch != 0) to if (mode != 0) -- :wq Claudio /* * Copyright (

Re: tap(4) performance tuning on (amd64)

2020-01-20 Thread Claudio Jeker
' to wire tun0 and tun1 together. You can select between, select(2), poll(2), kqueue(2) and pthreads as the way on how to multiplex the reads. For me the code triggers scheduler inefficencies and causes packets drops on the output queue when there are multiple packet producers. -- :wq Cl

Re: The OpenBSD talk at 36c3

2019-12-30 Thread Claudio Jeker
On Sun, Dec 29, 2019 at 01:29:12PM +0100, Henry Jensen wrote: > Greetings, > > for those who didn't watched it, there is an accompanied site at > https://isopenbsdsecu.re/ > > Summary: There are a lot of claims. The speaker basically said, that > some mitigations are "cool", but other, more or

Re: Readv and writev failing across ethernet

2019-12-24 Thread Claudio Jeker
On Mon, Dec 23, 2019 at 08:17:37AM -0800, Philip Guenther wrote: > On Mon, Dec 23, 2019 at 5:04 AM Raymond, David > wrote: > > > The "timeout" error was numerically 60. Curiously, boards with RTL > > 8111GR chips did not produce these errors, but those with RTL 8111H > > chips did.

Re: route an IPv4 /32 to a different interface

2019-12-16 Thread Claudio Jeker
On Sun, Dec 15, 2019 at 08:57:48PM +0100, Denis Fondras wrote: > Hi, > > I have this setup : > > em3: flags=8843 mtu 1500 > lladdr > index 4 priority 0 llprio 3 > media: Ethernet autoselect (1000baseSX full-duplex) > status: active > inet6

Re: random packet drops with syncookies/synproxy

2019-11-09 Thread Claudio Jeker
On Sat, Nov 09, 2019 at 01:30:32PM +0100, Markus Wernig wrote: > Hm, also no replies to that one :-) > > On 11/6/19 8:15 PM, Markus Wernig wrote: > > > So just to make sure: Is anybody using syncookies and/or synproxy in > > production in a similar setup? > > So nobody is using

Re: LDAP tls: handshake failure

2019-10-24 Thread Claudio Jeker
On Thu, Oct 24, 2019 at 02:06:47PM +0200, Martijn van Duren wrote: > On 10/24/19 1:50 PM, Robert Klein wrote: > > Hi, > > > > > > > > On Thu, 24 Oct 2019 05:26:49 +0200, > > Predrag Punosevac wrote: > >> > >> Kapetanakis Giannis wrote: > >> > >>> On 23/10/2019 19:14, Predrag Punosevac wrote: >

Re: Does net.mpls.maxloop_inkernel do anything?

2019-10-24 Thread Claudio Jeker
On Thu, Oct 24, 2019 at 12:01:35PM +0100, Thomas Habets wrote: > $ cd /usr/src/sys > $ grep mpls_inkloop -r . > ./netmpls/mpls.h: _inkloop, \ > ./netmpls/mpls.h:extern int mpls_inkloop; > ./netmpls/mpls_raw.c:int mpls_inkloop = MPLS_INKERNEL_LOOP_MAX; > $ grep -r

Re: Requesting vi tips

2019-10-18 Thread Claudio Jeker
On Fri, Oct 18, 2019 at 03:12:37PM +0100, cho...@jtan.com wrote: > OK this has started to get on my nerves now. > > I use vi to enter emails despite using evil emacs for development and > other general editing. Rather than linking them together (they're on > seperate machines) to enter emails in

Re: Strong Host Model in OpenBSD network stack

2019-10-18 Thread Claudio Jeker
On Thu, Oct 17, 2019 at 09:50:28PM +0200, Bastian Kanbach wrote: > Hello, > > recently I was performing some checks that relate to the "Strong Host > Model" and "Weak Host Model", and I noticed that OpenBSD was behaving > different than I expected. I always assumed that the network stack of >

Re: Strong Host Model in OpenBSD network stack

2019-10-18 Thread Claudio Jeker
On Fri, Oct 18, 2019 at 07:21:42AM +0200, Remi Locherer wrote: > On Thu, Oct 17, 2019 at 10:33:41PM -0600, Theo de Raadt wrote: > > > Setting net.inet.ip.check_interface=1 on FreeBSD stopped any ICMP Echo > > > replies immediately. > > > > > > On NetBSD I set net.inet.ip.checkinterface=1 and it

Re: bgpctl(8) community question

2019-10-10 Thread Claudio Jeker
On Mon, Oct 07, 2019 at 04:48:34PM -0500, Adam Thompson wrote: > [OpenBSD 6.5-STABLE, up to date] > > When using bgpctl(8), I'm able to do almost everything I need, but I'm > having trouble figuring out how to do one thing: > > How do I show routes that do NOT have a community (or ext-community,

Re: bgplg ping/traceroute failed

2019-10-03 Thread Claudio Jeker
On Thu, Oct 03, 2019 at 02:07:58PM -0400, Henry Bonath wrote: > Hello Misc, > > I had thought that I had configured the looking glass correctly per the man > page, > I have everything else working correctly, with custom header and footer > with CSS and all works great. > Whenever I attempt to

Re: bgpctl sho ri nei terse output vs man page discrepancy

2019-09-23 Thread Claudio Jeker
On Sun, Sep 22, 2019 at 04:48:18PM -, Stuart Henderson wrote: > On 2019-09-22, Rachel Roch wrote: > > Hi, > > > > Hopefully I'm not missing something silly here but I've read the paragraph > > in the man page and it only lists 15 variables: > > > > "The printed numbers are the sent and

Re: Prometheus node_exporter on OpenBSD - anyone managed ?

2019-09-21 Thread Claudio Jeker
On Fri, Sep 20, 2019 at 10:36:11AM +0200, Rachel Roch wrote: > Claudio, > > pkg_add node_exporter ? > > I already had a good look at the package list on the FTP mirror and > can't see any node_exporter there ?  pkg_add seems to agree with me, it > says "can't find node_exporter" ? > > Certainly

Re: What is the 3rd column in the learned mac address list in ifconfig

2019-09-20 Thread Claudio Jeker
On Fri, Sep 20, 2019 at 07:16:15AM +0100, Tom Smyth wrote: > Hi all, hope those of you at eurobsdcon are enjoying your selves > wish I was there > I waswondering what is the 3rd column in the learned mac address list in > the column is a number 0 or 1 after the interface name in > ifconfig

Re: Prometheus node_exporter on OpenBSD - anyone managed ?

2019-09-19 Thread Claudio Jeker
On Thu, Sep 19, 2019 at 10:13:23PM +, Travis Cole wrote: > > Looks like they are assuming GNU make. > > > Try doing the build with 'gmake'. > > > If you don't already have gmake installed: > > > # pkg_add gmake > Or just do `pkg_add node_exporter`. While prometheus does not provide a

Re: ldapd hangs/stalls

2019-08-28 Thread Claudio Jeker
On Wed, Aug 28, 2019 at 03:17:05PM -0400, Allan Streib wrote: > Allan Streib writes: > > > Running a rather busy ldapd host, and seeing some hangs in responses to > > queries. > > > I see that fstat -u _ldapd always ends at FD 119 when the hang occurs: > > [...] > _ldapd ldapd 42641

Re: missing SYN_RECV in netstat

2019-08-20 Thread Claudio Jeker
On Tue, Aug 20, 2019 at 07:36:11PM +0200, Peter J. Philipp wrote: > Hi, > > On the NANOG list there is a thread about something synflooding: > https://mailman.nanog.org/pipermail/nanog/2019-August/102713.html > > Most of my hosts are synflooded, and I was wondering why my OpenBSD > hosts don't

Re: Building Unbound with Python module support

2019-08-07 Thread Claudio Jeker
On Wed, Aug 07, 2019 at 08:44:07AM +0100, Andy Lemin wrote: > Morning Stuart, > > So I’ve tested with the base build options properly, the initial errors I saw > before have gone which is good. But I have a more fundamental issue with > Unbound now sadly. > > Swig successfully built

Re: Best 1Gbe NIC

2019-08-02 Thread Claudio Jeker
On Fri, Aug 02, 2019 at 12:28:58PM +0100, Andy Lemin wrote: > Ahhh, thank you! > > I didn’t realise this had changed and now the drivers are written with > full knowledge of the interface. That is an overstatement but we know for sure a lot more about these cards then many other less open ones.

Re: Moving from Bird to OpenBGPD

2019-07-16 Thread Claudio Jeker
On Mon, Jul 15, 2019 at 11:33:45PM -0700, BSD user wrote: > > > On 7/14/19 11:24 PM, Claudio Jeker wrote: > > On Sun, Jul 14, 2019 at 07:28:29PM -0700, BSD user wrote: > > > > > > > > > On 7/14/19 12:52 AM, Denis Fondras wrote: > > > > On

Re: Moving from Bird to OpenBGPD

2019-07-15 Thread Claudio Jeker
On Sun, Jul 14, 2019 at 07:28:29PM -0700, BSD user wrote: > > > On 7/14/19 12:52 AM, Denis Fondras wrote: > > On Sat, Jul 13, 2019 at 09:44:28PM -0700, BSD user wrote: > > > Hello, > > > > > > My apologies for sending this email multiple times. > > > > > > I was so mortified by Tutanota's

Re: umsm: sparc64

2019-07-04 Thread Claudio Jeker
On Thu, Jul 04, 2019 at 12:52:15PM +0300, Kihaguru Gathura wrote: > Hereby attached the new multiprocessor kernel with umsm working ok. > > The error message appears for each connection made to cuaU. This might > potentially populate dmesg logs over time. > > Error message: > umsm0: this device

Re: man bgpd.conf + question

2019-06-29 Thread Claudio Jeker
On Fri, Jun 28, 2019 at 10:52:01PM +, Mik J wrote: > Hello, > I have a syntax error with  announce none > group "spam-bgp" { >     remote-as   $spamASN >     multihop 64 >     announce none > > I was told recently that everything is filtered by default from 6.4 and read > on

Re: Route through different gateways depending on process

2019-06-24 Thread Claudio Jeker
ging on" -- :wq Claudio > ‐‐‐ Original Message ‐‐‐ > On Friday, June 21, 2019 8:27 PM, Brian Brombacher > wrote: > > > You’ll also need PF rules to allow incoming traffic from your squid clients > > to go to the routing table where your squid process is run

Re: Route through different gateways depending on process

2019-06-21 Thread Claudio Jeker
On Fri, Jun 21, 2019 at 02:11:53PM +, slackwaree wrote: > Hello, > > I wonder if the following scenario can be solved with OpenBSD on 1 single > machine or with VMM: > > I got 3 OpenBSD vms, all of them are exactly the same running squid except > they use different default routers to route

Re: network alias on different network

2019-06-20 Thread Claudio Jeker
On Thu, Jun 20, 2019 at 07:05:57PM +, Victor Camacho wrote: > Hi, > > Using OpenBSD 6.4 and I wanted to run some alias ip addresses on one of the > interfaces. > My question is, can I use a different network as an alias? > > Example: > fw3# more hostname.bge0 > inet 10.2.0.1 255.255.0.0 >

Re: Newer snapshots on ALIX

2019-06-19 Thread Claudio Jeker
On Wed, Jun 19, 2019 at 08:37:28AM +0200, Paul de Weerd wrote: > Morning folks, > > I ran into a problem after upgrading my ALIX to a more recent snapshot > in that it won't boot anymore. It gets to "entry point 0x2d0" and > then stops. I tried using the PXE bootloader to load the local

Re: "ucode too large"

2019-06-07 Thread Claudio Jeker
On Fri, Jun 07, 2019 at 03:43:39PM +0200, Paul de Weerd wrote: > I've just replaced my home gateway with a brandless machine with an > i5-7200U. While preparing, I noticed the message "ucode too large" > scrolling by on the serial console, just before the kernel starts. > > The dmesg shows cpu0

Re: OpenBSD on thinkpad x280

2019-05-25 Thread Claudio Jeker
On Sat, May 25, 2019 at 03:53:03PM +0100, Maurice McCarthy wrote: > On 25/05/2019, Timo Myyrä wrote: > > Tristan Pilat writes: > > > >> Hi OpenBSD users and devs! > >> > >> I got a new laptop in January, a thinkpad x280. At that time my system > >> running 'current' was very slow and I assumed

  1   2   3   4   5   6   7   8   9   10   >