rework pfsync deferral timeout handling

2021-06-13 Thread David Gwynne
pfsync deferrals are used so if you have firewalls that could both process packets, you defer sending the initial packet in state so the peer can learn about the state before potentially handling packets for it. there are three ways that a deferal can end. the preferred one is if a peer firewall

Re: [External] : Re: parallel forwarding vs. bridges

2021-06-13 Thread David Gwynne
On Sat, Jun 05, 2021 at 01:09:01PM +0200, Alexandr Nedvedicky wrote: > Hello David, > > > > > the scope of the pf locks likely needs reduction anyway. one of my > > I agree. pf_lock covers too much in PF currently. it protects, > all rules, tables and fragment caches. > > > production

(get)nsecuptime

2021-06-13 Thread David Gwynne
we have a few places that use a uint64_t with the number of nanosecons of uptime the machine has. this factors it out to make them a bit more generally available. i was going to add yet another one of these to pfsync, but thought it might be a good idea to factor them out first. ok? Index:

dhcpleased(8): implement classless static routes option

2021-06-13 Thread Florian Obser
Implement "classless static routes" dhcp option. For this we need to be able to handle multiple routes being sent from the engine to the main process as well as to the control tool. This also lets us handle multiple default routes in the "routers" option for free. The configuration of the

[PATCH] pkg-config discarding any paths that end in $sys_path

2021-06-13 Thread Oliver Marriott
pkg-config automatically discards paths that match system include paths, but it also matches any path that _ends_ in what looks like a system path. This was impacting Neovim's CI system where the build artefacts are placed in "~/neovim/.deps/usr/include". When running `pkg-config --cflags`, it

Re: fix and enable vmd(8) diskfmt regress test

2021-06-13 Thread Ori Bernstein
On Sun, 13 Jun 2021 11:09:20 -0400, Dave Voutila wrote: > Was about to add a test for something I'm hacking on when I noticed the > diskfmt regress test wasn't enabled. I took a look and it's rotted. :( > > It was originally written by Ori Bernstein and imported by ccardenas@ > days before the

fix and enable vmd(8) diskfmt regress test

2021-06-13 Thread Dave Voutila
Was about to add a test for something I'm hacking on when I noticed the diskfmt regress test wasn't enabled. I took a look and it's rotted. :( It was originally written by Ori Bernstein and imported by ccardenas@ days before the vmctl(8) qcow2 disk creation capability was committed by the same

Re: Adjust url of SD Association in comment in sdhc.c

2021-06-13 Thread Jonathan Gray
On Sun, Jun 13, 2021 at 05:41:32AM +0200, Felix Kronlage-Dammers wrote: > hi, > > the legit URL of the SD Associations is www.sdcard.org, not > www.sdcard.com. > > felix > thanks, committed > > > Index: sys/dev/sdmmc/sdhc.c >

recvmsg returns MSG_DONTWAIT

2021-06-13 Thread Greg Steuck
I started with a failing test for Haskell network package on 6.9-current amd64 (cabal get network-3.1.2.1 && cabal v2-test) network-3.1.2.1/build/spec/spec --match "/Network.Socket.ByteString/recvMsg/works well/" tests/Network/Socket/ByteStringSpec.hs:209:21: 1)