Re: Router project on OpenBSD questions

2012-09-28 Thread Otto Moerbeek
On Tue, Sep 25, 2012 at 05:51:42PM +0100, Stuart Henderson wrote: On 2012/09/25 18:24, Otto Moerbeek wrote: On Tue, Sep 25, 2012 at 11:11:19AM +, Stuart Henderson wrote: On 2012-09-25, Christoph Leser le...@sup-logistik.de wrote: Thank you for this hint. I indeed have ike.c

Re: Router project on OpenBSD questions

2012-09-28 Thread Christoph Leser
. September 2012 13:45 An: misc@openbsd.org Cc: Christoph Leser Betreff: Re: Router project on OpenBSD questions On Tue, Sep 25, 2012 at 05:51:42PM +0100, Stuart Henderson wrote: On 2012/09/25 18:24, Otto Moerbeek wrote: On Tue, Sep 25, 2012 at 11:11:19AM +, Stuart Henderson wrote

Re: Router project on OpenBSD questions

2012-09-25 Thread Christoph Leser
: Stuart Henderson; misc@openbsd.org Betreff: Re: Router project on OpenBSD questions On Mon, Sep 24, 2012 at 06:57:26PM +, Christoph Leser wrote: Thanks for clarification. I disabled NAT-T with isakmpd -K -T. A few of my VPNs came to life with this setting, but were instable

Re: Router project on OpenBSD questions

2012-09-25 Thread Stuart Henderson
On 2012-09-25, Christoph Leser le...@sup-logistik.de wrote: Thank you for this hint. I indeed have ike.c r=1.76. So why did you say you were running 5.2?

Re: Router project on OpenBSD questions

2012-09-25 Thread Otto Moerbeek
On Tue, Sep 25, 2012 at 11:11:19AM +, Stuart Henderson wrote: On 2012-09-25, Christoph Leser le...@sup-logistik.de wrote: Thank you for this hint. I indeed have ike.c r=1.76. So why did you say you were running 5.2? The art of problem reporting is much underappreciated, sadly.

Re: Router project on OpenBSD questions

2012-09-25 Thread Stuart Henderson
On 2012/09/25 18:24, Otto Moerbeek wrote: On Tue, Sep 25, 2012 at 11:11:19AM +, Stuart Henderson wrote: On 2012-09-25, Christoph Leser le...@sup-logistik.de wrote: Thank you for this hint. I indeed have ike.c r=1.76. So why did you say you were running 5.2? The art of

Re: Router project on OpenBSD questions

2012-09-24 Thread Christoph Leser
Henderson [mailto:s...@spacehopper.org] Gesendet: Samstag, 22. September 2012 16:52 An: Christoph Leser; misc@openbsd.org Betreff: Re: Router project on OpenBSD questions Search the archives for the cisco nat-t problem, I sent a mail with more details and I think there was a patch

Re: Router project on OpenBSD questions

2012-09-24 Thread Christoph Leser
It seems that the patch from Stuart Henderson, proposed on Aug.4 2012 on tech@ has not made it into –current yet. Von: Stuart Henderson [mailto:s...@spacehopper.org] Gesendet: Samstag, 22. September 2012 16:52 An: Christoph Leser; misc@openbsd.org Betreff: Re: Router project on OpenBSD

Re: Router project on OpenBSD questions

2012-09-24 Thread Stuart Henderson
On 2012/09/24 13:24, Christoph Leser wrote: It seems that the patch from Stuart Henderson, proposed on Aug.4 2012 on tech@ has not made it into –current yet. I only forwarded it, the patch is from hshoexer. Also it is only a partial diff, not suitable to be committed, the encap mode value

Re: Router project on OpenBSD questions

2012-09-24 Thread Christoph Leser
: Montag, 24. September 2012 16:41 An: Christoph Leser Cc: misc@openbsd.org Betreff: Re: Router project on OpenBSD questions On 2012/09/24 13:24, Christoph Leser wrote: It seems that the patch from Stuart Henderson, proposed on Aug.4 2012 on tech@ has not made it into –current yet. I

Re: Router project on OpenBSD questions

2012-09-24 Thread Otto Moerbeek
...@spacehopper.org] Gesendet: Montag, 24. September 2012 16:41 An: Christoph Leser Cc: misc@openbsd.org Betreff: Re: Router project on OpenBSD questions On 2012/09/24 13:24, Christoph Leser wrote: It seems that the patch from Stuart Henderson, proposed on Aug.4 2012 on tech@ has not made

Re: Router project on OpenBSD questions

2012-09-22 Thread Christoph Leser
On Feb 28, 2012, Stuart Henderson wrote: List: openbsd-mischttp://marc.info/?l=openbsd-miscr=1w=2 Subject:Re: Router project on OpenBSD questionshttp://marc.info/?t=13303717306r=1w=2 From: Stuart Henderson stu () spacehopper ! orghttp://marc.info/?a=10397134052r=1w=2

Re: Router project on OpenBSD questions

2012-09-22 Thread Stuart Henderson
Search the archives for the cisco nat-t problem, I sent a mail with more details and I think there was a patch with it. Pretty sure that would have affected older OpenBSD versions too though. Christoph Leser le...@sup-logistik.de wrote: On Feb 28, 2012, Stuart Henderson wrote: List:

Re: Router project on OpenBSD questions

2012-02-29 Thread Stuart Henderson
On 2012-02-28, Kaya Saman kayasa...@gmail.com wrote: I was planning on getting a 2901 with VDSL2/ADSL2/2+ Annex M card and 8 port Gb switch card. But after careful consideration I decided against it as it would issue the same problems for me and be more expensive then going down the OpenBSD

Re: Router project on OpenBSD questions

2012-02-29 Thread Patrick Lamaiziere
Le Mon, 27 Feb 2012 19:38:45 +, Kaya Saman kayasa...@gmail.com a icrit : Hello, I have currently only used OpenBSD as a test vector setup on VirtualBox and 2x Sun Fire V240's as a DNS server (master/slave) using Bind9. So basically in short am an OpenBSD newbee :-) Ok so here goes;

Re: Router project on OpenBSD questions

2012-02-29 Thread Patrick Lamaiziere
Le Mon, 27 Feb 2012 16:58:05 -0300, Christiano F. Haesbaert haesba...@haesbaert.org a icrit : Hello, With a decent hardware, I think you can reach 1mpps (that's million packets per second). I don't think. As far I can see here with a rate of 50K packets through the system, it already spents

Re: Router project on OpenBSD questions

2012-02-29 Thread Peter Hessler
On 2012 Feb 29 (Wed) at 11:54:13 +0100 (+0100), Patrick Lamaiziere wrote: :OpenBSD is not perfect too, it would be nice that pflow handles ipv6 pflow now handles ipv6 (in 5.1) :and the support of one year is a bit short. But nothing is perfect. If you need support for longer than a year, you

Re: Router project on OpenBSD questions

2012-02-29 Thread David Coppa
On Wed, Feb 29, 2012 at 1:10 PM, Patrick Lamaiziere patf...@davenulle.org wrote: Le Mon, 27 Feb 2012 16:58:05 -0300, Christiano F. Haesbaert haesba...@haesbaert.org a icrit : Hello, With a decent hardware, I think you can reach 1mpps (that's million packets per second). I don't think.

Re: Router project on OpenBSD questions

2012-02-29 Thread Otto Moerbeek
On Wed, Feb 29, 2012 at 01:10:27PM +0100, Patrick Lamaiziere wrote: Le Mon, 27 Feb 2012 16:58:05 -0300, Christiano F. Haesbaert haesba...@haesbaert.org a icrit : Hello, With a decent hardware, I think you can reach 1mpps (that's million packets per second). I don't think. As far

Re: Router project on OpenBSD questions

2012-02-29 Thread Patrick Lamaiziere
Le Wed, 29 Feb 2012 13:13:30 +0100, Peter Hessler phess...@theapt.org a icrit : Hello, On 2012 Feb 29 (Wed) at 11:54:13 +0100 (+0100), Patrick Lamaiziere wrote: :OpenBSD is not perfect too, it would be nice that pflow handles ipv6 pflow now handles ipv6 (in 5.1) That's cool! Thanks.

Re: Router project on OpenBSD questions

2012-02-29 Thread Tomas Bodzar
On Wed, Feb 29, 2012 at 1:43 PM, Patrick Lamaiziere patf...@davenulle.org wrote: Le Wed, 29 Feb 2012 13:13:30 +0100, Peter Hessler phess...@theapt.org a icrit : Hello, On 2012 Feb 29 (Wed) at 11:54:13 +0100 (+0100), Patrick Lamaiziere wrote: :OpenBSD is not perfect too, it would be nice

Re: Router project on OpenBSD questions

2012-02-29 Thread Henning Brauer
* Patrick Lamaiziere patf...@davenulle.org [2012-02-29 13:12]: I don't think. it is very tempting to comment on that :) As far I can see here with a rate of 50K packets through the system, it already spents 50% in interrupt. oh, really! that applies to each and every box and usage scenario

Re: Router project on OpenBSD questions

2012-02-29 Thread Anonymous Remailer (austria)
Brauer spewed: * Patrick Lamaiziere patf...@davenulle.org [2012-02-29 13:12]: I don't think. it is very tempting to comment on that :) As far I can see here with a rate of 50K packets through the system, it already spents 50% in interrupt. oh, really! that applies to each and every

Re: Router project on OpenBSD questions

2012-02-29 Thread Christiano F. Haesbaert
On 29 February 2012 14:15, Anonymous Remailer (austria) mixmas...@remailer.privacy.at wrote: Brauer spewed: * Patrick Lamaiziere patf...@davenulle.org [2012-02-29 13:12]: I don't think. it is very tempting to comment on that :) As far I can see here with a rate of 50K packets through the

Re: Router project on OpenBSD questions

2012-02-28 Thread Stuart Henderson
I also would like to know if anyone knows of any ADSL2+ Annex M standard PCI (/x/) based modem card that I can use to connect to my ISP with instead of using an external device? So far in my search I came across this: http://linitx.com/viewcategory.php?catid=47 This is basically an ADSL

Re: Router project on OpenBSD questions

2012-02-28 Thread Kaya Saman
On 02/28/2012 01:57 PM, Stuart Henderson wrote: I also would like to know if anyone knows of any ADSL2+ Annex M standard PCI (/x/) based modem card that I can use to connect to my ISP with instead of using an external device? So far in my search I came across this:

Re: Router project on OpenBSD questions

2012-02-27 Thread Christiano F. Haesbaert
On 27 February 2012 16:38, Kaya Saman kayasa...@gmail.com wrote: Hi, this is my first posting here :-) I have currently only used OpenBSD as a test vector setup on VirtualBox and 2x Sun Fire V240's as a DNS server (master/slave) using Bind9. So basically in short am an OpenBSD newbee :-)

Re: Router project on OpenBSD questions

2012-02-27 Thread Kaya Saman
snip Good luck Many thanks Christiano for such a quick and comprehensive response :-) Regards, Kaya

Re: Router project on OpenBSD questions

2012-02-27 Thread Kaya Saman
So I would like to build a router out of a Quad Core Xeon system. I've selected the hardware for it already and the software barring the base OS. You want the highest cache and highest frequency cpu you can find. MP will not help you with routing performance at all. Something like this:

Re: Router project on OpenBSD questions

2012-02-27 Thread Christiano F. Haesbaert
On 27 February 2012 17:12, Kaya Saman kayasa...@gmail.com wrote: So I would like to build a router out of a Quad Core Xeon system. I've selected the hardware for it already and the software barring the base OS. You want the highest cache and highest frequency cpu you can find. MP will not

Re: Router project on OpenBSD questions

2012-02-27 Thread Kaya Saman
With this though I'm betting that a Core2Quad Q8400s CPU (which I currently run on a FreeBSD based Mini-NAS mainframe) will be more powerful then any Cisco SMB based router? - I can see it being more powerful then my 8xx or 18xx series in anycase! I don't know cisco, it's all about how much