Re: wireguard and nat redirection issue

2019-10-22 Thread loopw
On 2019-10-21 16:19, 4642 wrote: ## Egress ### pass in on egress inet proto udp from any to (egress:0) port 51820 rdr-to $wg_svr pass out quick on egress inet ## LAN ### pass in on $lan_if inet proto udp from any to (egress:0) port 51820 rdr-to $wg_svr pass in

Re: acme-client issue with domain w/ alternative name

2019-10-22 Thread Daniel Winters
Good morning, > Today acme-client renewed all but 2 of my domains; the two that have > "alternative names" in the certificates. I cannot get it to renew > those two. This is on amd64 on 6.6-current, updated today. I can reproduce this on amd64 current, as well as on 6.6. Same error and and

Re: wireguard and nat redirection issue

2019-10-22 Thread 4642
Thanks for suggestion's, i added some quick rules and put a more specific nat rule in place and now the rdr rule is working. Thank you. Sent from ProtonMail mobile Original Message On 22 Oct 2019, 07:26, loopw wrote: > On 2019-10-21 16:19, [4642](tel:4642) wrote: >> ##

Re: OpenBSD 6.6 amd64 iavf(4) iavf / SR-iov 40G NIC lots of Jitter

2019-10-22 Thread Tom Smyth
Hi, I ran another test with virtio net drivers on the same Q35 type vm guest in KVM and the pings were a lot more stable. --- 10.4.24.1 ping statistics --- 1000 packets transmitted, 1000 packets received, 0.0% packet loss round-trip min/avg/max/std-dev = 0.223/0.394/3.766/0.172 ms pcidump

Re: Encrypting my keydisk

2019-10-22 Thread Aaron Mason
On Wed, Oct 23, 2019 at 5:11 AM List wrote: > > I'm sorry I might have not been so clear about it. I meant a way to > encrypt the actual keydisk with a passphrase. > > On 2019-10-18 13:34, Jan Stary wrote: > >>> On Wednesday, October 16, 2019 11:06 PM, List > >>> wrote: > I was wondering

Re: On blindly running code

2019-10-22 Thread Aaron Mason
On Fri, Oct 18, 2019 at 11:23 PM wrote: > > Frank Beuth writes: > > On Fri, Oct 18, 2019 at 11:54:18AM +0100, cho...@jtan.com wrote: > > >Virtualisation is not a panacea. I have managed to achieve data loss > > >through destructi > > ve actions taken within a "safe" virtualised sandbox. > > > >

Ocaml's owl fail to build

2019-10-22 Thread Stefan Wollny
Hi there! Any Ocaml experts around who managed to install 'owl'? Installation of owl fails as 'eigen' and 'open-blas' fail to build. I am running amd64-current. Any suggestions what I might miss??? TIA! Best, STEFAN 8<~~~ $ opam switch list # switch

Re: fw_update long timeout, how to specify mirror

2019-10-22 Thread Claus Assmann
Tommy Nevtelen wrote: > I have some systems without access to the Internets and with internal > mirrors for packages and fw_update packages. But when openbsd does a > sysupgrade or a new install it runs fw_update against > firmware.openbsd.org. The problem here is that it will hang until the

fw_update long timeout, how to specify mirror

2019-10-22 Thread Tommy Nevtelen
Hi! I have some systems without access to the Internets and with internal mirrors for packages and fw_update packages. But when openbsd does a sysupgrade or a new install it runs fw_update against firmware.openbsd.org. The problem here is that it will hang until the timeout is reached. #

ixl(4) Driver SR-IOV Physical Function Interface has jitter on OpenBSD 6.5 and 6.6

2019-10-22 Thread Tom Smyth
Hello, further to my testing of Iavf Intel Virtual Function drivers on Intel XL710 I attached the Q35 KVM virtual machine to the Intel XL710 physical function (rather than the virtual function ) I with further testing using the SR-IOV interface PF function the jitter issue was present ... I have

Re: Encrypting my keydisk

2019-10-22 Thread List
I'm sorry I might have not been so clear about it. I meant a way to encrypt the actual keydisk with a passphrase. On 2019-10-18 13:34, Jan Stary wrote: >>> On Wednesday, October 16, 2019 11:06 PM, List wrote: I was wondering if there is a reason for the lack of keydisk encryption. > $ man

Re: Nobody said it yet...

2019-10-22 Thread Sohrab Monfared
Happy birthday! and of course a big *thank you* to the developers and contributors. On 10/19/19, STeve Andre' wrote: > Happy birthday to OpenBSD! > > -- Best regards Sohrab Monfared

Re: ppppoe octeon kernel panic .6.6

2019-10-22 Thread Holger Glaess
hi ii will try tomorrow to do an backtrace after the panic. i there additonal thinks what i can , or just this described in https://www.openbsd.org/ddb.html ? Holger Am 22.10.19 um 07:10 schrieb Peter J. Philipp: Hi, The mail from Holger Glaess seems to be missing a backtrace. I got

Re: fw_update long timeout, how to specify mirror

2019-10-22 Thread Theo de Raadt
Tommy Nevtelen wrote: > I have some systems without access to the Internets and with internal > mirrors for packages and fw_update packages. But when openbsd does a > sysupgrade or a new install it runs fw_update against > firmware.openbsd.org. The problem here is that it will hang until the >

Re: acme-client issue with domain w/ alternative name

2019-10-22 Thread Florian Obser
On Tue, Oct 22, 2019 at 09:56:57AM +0100, Daniel Winters wrote: > Good morning, > > > Today acme-client renewed all but 2 of my domains; the two that have > > "alternative names" in the certificates. I cannot get it to renew > > those two. This is on amd64 on 6.6-current, updated today. > > I

Re: acme-client issue with domain w/ alternative name

2019-10-22 Thread Ian Darwin
On 10/21/19 19:38, Ian Darwin wrote: Today acme-client renewed all but 2 of my domains; the two that have "alternative names" in the certificates. I cannot get it to renew those two. This is on amd64 on 6.6-current, updated today. Just to follow up: Of my two problem domains, one was caused

Regarding multiple reports on "display flickering"

2019-10-22 Thread Erling Westenvik
I'd say something fishy is going on and believe it to be drm(4) related. I don't run xfce but cwm(1) and with compton(1) as compositor since the latter allows me to have blurred transparent backgrounds in xterm. This setup hasn't worked for quite some time now (perhaps months?) but I haven't had

Re: fw_update long timeout, how to specify mirror

2019-10-22 Thread Chris Cappuccio
Tommy Nevtelen [to...@nevtelen.com] wrote: > Hi! > > I have some systems without access to the Internets and with internal > mirrors for packages and fw_update packages. But when openbsd does a > sysupgrade or a new install it runs fw_update against firmware.openbsd.org. > The problem here is

surprisingly good net speed with 2 REs

2019-10-22 Thread gwes
People occasionally comment about OpenBSD network performance. A data point: Two REs connected via a switch. Looks like they are running as fast as they can. REs are notoriously slow. Cheap though so they're everywhere. Peaks at about 500mb/sec Mostly filesystem limited on the OpenBSD end. We

Re: surprisingly good net speed with 2 REs

2019-10-22 Thread Chris Cappuccio
g...@oat.com [g...@oat.com] wrote: > > Peaks at about 500mb/sec tcpbench is a better test because it won't measure your disk i/o at the same time also, the realtek chip you mention has a hard limitation of around 500Mbps on either transmit or receive, i'm not sure. this is according to luigi

Re: surprisingly good net speed with 2 REs

2019-10-22 Thread gwes
On 10/22/19 11:06 PM, Chris Cappuccio wrote: g...@oat.com [g...@oat.com] wrote: Peaks at about 500mb/sec tcpbench is a better test because it won't measure your disk i/o at the same time also, the realtek chip you mention has a hard limitation of around 500Mbps on either transmit or