Re: reloading pf through ansible easy hook

2016-11-22 Thread BARDOU Pierre
igine- De : owner-t...@openbsd.org [mailto:owner-t...@openbsd.org] De la part de Landry Breuil Envoyé : mardi 22 novembre 2016 14:53 À : tech@openbsd.org Objet : Re: reloading pf through ansible easy hook On Tue, Nov 22, 2016 at 11:15:01AM +0000, BARDOU Pierre wrote: > Hello, > > -

Re: reloading pf through ansible easy hook

2016-11-22 Thread BARDOU Pierre
Hello, - name: "Loading pf.conf" template: src=pf.conf dest=/etc/ validate="pfctl -f %s" Works fine for me. Configuration is copied and loaded if correct, otherwise the rule file is not modified and not loaded (and the playbook fails with error). -- Cordialement, Pierre BARDOU -Message d

Re: OPENBSD performance // intel NIC interrupts // interrupt moderation

2015-12-09 Thread BARDOU Pierre
Hello, FYI, my last firewall in production : OpenBSD 5.7 (GENERIC.MP) #2: Mon Jul 27 16:16:48 CEST 2015 cpu0: Intel(R) Xeon(R) CPU E3-1271 v3 @ 3.60GHz ix0 at pci2 dev 0 function 0 "Intel 82599" Peaks at 46% cpu on core1, traffic around 2 Gbps (230 kpps). I'm very eager to see it with a full M

Pflow export every X seconds

2015-06-05 Thread BARDOU Pierre
Hello, I'd love to see the feature Joerg Goltermann developed a while ago committed in the standard pflow : http://marc.info/?l=openbsd-misc&m=124661838923498&w=2 Do you know why it was never committed ? What would it need to be ? May I help in any way ? -- Cordialement, Pierre Bardou Ingéni