Traffic Shape for ISP on OpenBSD

2009-05-12 Thread Georg Kahest
), and that will make my pf ruleset really big, i was wondering if anyone has encountered smt similar, and what was their solution. Is the queue limit 256 queues per interface? Sidenote: all clients come from carp interface what has all the client networks as aliases. -- Georg Kahest ge...@viatel.ee ProGroup

HFSC AltQ

2009-05-27 Thread Georg Kahest
sys/altq/altq_hfsc.h set to support #define HFSC_MAX_CLASSES 64 what is the maximum value you can use there? kernel did compile with 1024, not sure yet will it work thou, what is the maximum value you have used ? would it be safe to use something like 2048? -- Georg Kahest ge...@viatel.ee

PF/Carp/Pfsync

2009-05-28 Thread Georg Kahest
gateway loses some packets on the moment of failover, im wondering what could cause that, what could i have overlooked, and why the problem only exists when box comes from reboot, rather then always. Georg Kahest ge...@viatel.ee ProGroup Holding

Re: PF/Carp/Pfsync

2009-06-01 Thread Georg Kahest
# $OpenBSD: netstart,v 1.122 2008/07/23 16:05:47 sthen Exp $ # $OpenBSD: rc,v 1.318 2008/07/09 20:23:47 djm Exp $ # uname -a OpenBSD node1 4.4 GENERIC.MP#1 amd64 On P, 2009-05-31 at 19:32 +0200, Stuart Henderson wrote: On 2009-05-28, Georg Kahest ge...@viatel.ee wrote: Hello, i

Re: PF/Carp/Pfsync

2009-06-01 Thread Georg Kahest
transition: INIT - BACKUP Jun 1 14:45:57 node1 /bsd: carp: carp1 demoted group carp to 0 Jun 1 14:46:00 node1 /bsd: carp1: state transition: BACKUP - MASTER On E, 2009-06-01 at 13:14 +0200, Stuart Henderson wrote: On 2009/06/01 12:55, Georg Kahest wrote: # $OpenBSD: netstart,v 1.122 2008

Re: PF/Carp/Pfsync

2009-06-01 Thread Georg Kahest
: pfsync0 demoted group pfsync to 0 On E, 2009-06-01 at 13:14 +0200, Stuart Henderson wrote: On 2009/06/01 12:55, Georg Kahest wrote: # $OpenBSD: netstart,v 1.122 2008/07/23 16:05:47 sthen Exp $ # $OpenBSD: rc,v 1.318 2008/07/09 20:23:47 djm Exp $ # uname -a OpenBSD node1

Re: PF/Carp/Pfsync

2009-06-01 Thread Georg Kahest
Okey i think i figured it out, the problem was with my switch spanning tree, when i disabled it for appropiate vlans everything started to work correctly. On E, 2009-06-01 at 13:14 +0200, Stuart Henderson wrote: On 2009/06/01 12:55, Georg Kahest wrote: # $OpenBSD: netstart,v 1.122 2008

Re: PF/Carp/Pfsync

2009-06-01 Thread Georg Kahest
. On E, 2009-06-01 at 13:14 +0200, Stuart Henderson wrote: On 2009/06/01 12:55, Georg Kahest wrote: # $OpenBSD: netstart,v 1.122 2008/07/23 16:05:47 sthen Exp $ # $OpenBSD: rc,v 1.318 2008/07/09 20:23:47 djm Exp $ # uname -a OpenBSD node1 4.4 GENERIC.MP#1 amd64

Re: PF/Carp/Pfsync

2009-06-01 Thread Georg Kahest
+0200, Stuart Henderson wrote: On 2009/06/01 15:57, Georg Kahest wrote: Okey now that the failover seems to be work i have hit another problem, the thing is when failover occurs and other node takes over, the client connection wont hit right ALTQ queue anymore, rather it goes unqueued(full

Re: PF/Carp/Pfsync

2009-06-02 Thread Georg Kahest
values and change by the box. Aswell I'm using HFSC queue algorythm, could any that make any difference ? On E, 2009-06-01 at 22:47 +0200, Henning Brauer wrote: * Georg Kahest ge...@viatel.ee [2009-06-01 15:21]: Yes the rulesets are identical, strange thing is from pftop it seems that it hits

Re: PF/Carp/Pfsync

2009-06-02 Thread Georg Kahest
the traffic hit the right queue again, i think the problem is that pf cannot sync correctly if different interface names are used on nodes, could anyone confirm that? On E, 2009-06-01 at 22:47 +0200, Henning Brauer wrote: * Georg Kahest ge...@viatel.ee [2009-06-01 15:21]: Yes the rulesets

Re: PF/Carp/Pfsync

2009-06-02 Thread Georg Kahest
workarounds for this issue. and hows the sitsuation with it at openbsd 4.5 ? example: pass in log on vlan0 from zzz.xxx.yyy.ddd/30 queue (zzz.xxx.yyy.ddd_stdi, zzz.xxx.yyy.ddd_acki) no state On E, 2009-06-01 at 22:47 +0200, Henning Brauer wrote: * Georg Kahest ge...@viatel.ee [2009-06-01 15:21

Re: PF/Carp/Pfsync

2009-06-04 Thread Georg Kahest
(new traffic will) , i think that for some reason the filter rules inside anchors dont get synced correctly. Is this really bug, or i have overlooked something? On T, 2009-06-02 at 19:52 +0200, Henning Brauer wrote: * Georg Kahest ge...@viatel.ee [2009-06-02 10:01]: The rules look identical

Re: carp master - backup problem

2009-10-29 Thread Georg Kahest
Hello i noticed that my netstat -s -p carp shows 1068 discarded for bad authentication My carp works okey otherwise, but should i worry about it ? how to debug it ? Bryan Irvine wrote: VVV 372 discarded for unknown vhid I know someone else already pointed it

Re: Net-SNMP in 4.5

2009-11-23 Thread Georg Kahest
Hello! I have net-snmp from ports with mischiefs openbsd mib patch, compiled and working. Georg On Mon, 2009-11-23 at 14:37 +0200, Donald Reichert wrote: Hello list, I know, 4.6 has been out for a while now... However, I run 4.5 (i386) on a pair of very heavily used load balancers