Re: httpd server_fcgi_read vs HEAD requests

2022-08-12 Thread Omar Polo
On 2022/08/11 23:11:11 +0200, Claudio Jeker wrote: > On Thu, Aug 11, 2022 at 08:41:43PM +0200, Omar Polo wrote: > > On 2022/08/11 19:37:08 +0200, Claudio Jeker wrote: > > > Reading through the fcgi code of httpd I wonder if HEAD requests are > > > handled correctly. In server_fcgi_read() the

Re: ipv4 and ipv6 fragment refactoring

2022-08-12 Thread Alexandr Nedvedicky
Hello, On Thu, Aug 11, 2022 at 11:59:55AM +0200, Alexander Bluhm wrote: > Hi, > > ip_fragment() and ip6_fragment() do nearly the same thing, but they > are implemented differently. > > The idea of this diff is to move things around. Then only differences > from the IP standards but not in

Re: ip6 routing header 0 offset

2022-08-12 Thread Alexandr Nedvedicky
Hello, On Thu, Aug 11, 2022 at 09:42:54PM +0200, Alexander Bluhm wrote: > Hi, > > The IPv6 routing header type 0 check should modify *offp only in > case of an error, so that the genrated icmp6 packet has the correct > pointer. After successful return, *offp should not be modified. makes

Re: bgpd better nexthop handling

2022-08-12 Thread Claudio Jeker
On Fri, Aug 12, 2022 at 03:06:14PM +0200, Theo Buehler wrote: > On Fri, Aug 12, 2022 at 12:43:09PM +0200, Claudio Jeker wrote: > > There is currently a race in bgpd when multiple nexthop become invalid at > > the same time. The problem is that the decision process may select an > > alternative

pflow(4): remove unused fields from 'pflow_softc' structure

2022-08-12 Thread Vitaliy Makkoveev
Subj. Index: sys/net/if_pflow.c === RCS file: /cvs/src/sys/net/if_pflow.c,v retrieving revision 1.94 diff -u -p -r1.94 if_pflow.c --- sys/net/if_pflow.c 6 Jun 2022 14:45:41 - 1.94 +++ sys/net/if_pflow.c 12 Aug 2022

softraid(4) RAID 1C boot support on arm64

2022-08-12 Thread Klemens Nanni
On Thu, Aug 04, 2022 at 07:26:23PM +0200, Stefan Sperling wrote: > This adds support for booting from RAID 1C volumes on amd64. > Only boot-loader changes are needed. Both installboot(8) and > the kernel already do what is required to make this work. > > I have tested with biosboot in vmm. The

bgplgd(8) handle timeout more gracefully

2022-08-12 Thread Claudio Jeker
After all this slowcgi timeout fixing, here a similar thing for bgplgd(8). If the timeout fires, kill the bgpctl command first with SIGTERM then with SIGKILL. If the kill fails, close and cleanup the connection. I also reduced the timeout to a more reasonable 30sec. Lets see how that goes. This

Re: pflow(4): remove unused fields from 'pflow_softc' structure

2022-08-12 Thread Alexander Bluhm
On Fri, Aug 12, 2022 at 04:54:56PM +0300, Vitaliy Makkoveev wrote: > Subj. OK bluhm@ > Index: sys/net/if_pflow.c > === > RCS file: /cvs/src/sys/net/if_pflow.c,v > retrieving revision 1.94 > diff -u -p -r1.94 if_pflow.c > ---

bgpd better nexthop handling

2022-08-12 Thread Claudio Jeker
There is currently a race in bgpd when multiple nexthop become invalid at the same time. The problem is that the decision process may select an alternative path that also has a no longer valid nexthop but the process that does all the adjustments did not reach that prefix yet. The main issue here

Re: softraid(4) RAID 1C boot support on amd64

2022-08-12 Thread Erling Westenvik
On Thu, Aug 04, 2022 at 07:26:23PM +0200, Stefan Sperling wrote: > This adds support for booting from RAID 1C volumes on amd64. This is so cool and I can't wait to get a chance to try it out! > Only boot-loader changes are needed. Both installboot(8) and > the kernel already do what is required

Re: bgpd better nexthop handling

2022-08-12 Thread Theo Buehler
On Fri, Aug 12, 2022 at 12:43:09PM +0200, Claudio Jeker wrote: > There is currently a race in bgpd when multiple nexthop become invalid at > the same time. The problem is that the decision process may select an > alternative path that also has a no longer valid nexthop but the process > that does

Re: bgplgd(8) handle timeout more gracefully

2022-08-12 Thread Theo Buehler
On Fri, Aug 12, 2022 at 12:53:59PM +0200, Claudio Jeker wrote: > After all this slowcgi timeout fixing, here a similar thing for bgplgd(8). > If the timeout fires, kill the bgpctl command first with SIGTERM then with > SIGKILL. If the kill fails, close and cleanup the connection. > I also reduced

Re: softraid(4) RAID 1C boot support on amd64

2022-08-12 Thread Stefan Sperling
On Fri, Aug 12, 2022 at 02:28:30PM +0200, Erling Westenvik wrote: > On Thu, Aug 04, 2022 at 07:26:23PM +0200, Stefan Sperling wrote: > > This adds support for booting from RAID 1C volumes on amd64. > > This is so cool and I can't wait to get a chance to try it out! > > > Only boot-loader changes

Re: bgplgd(8) handle timeout more gracefully

2022-08-12 Thread Claudio Jeker
On Fri, Aug 12, 2022 at 03:16:36PM +0200, Theo Buehler wrote: > On Fri, Aug 12, 2022 at 12:53:59PM +0200, Claudio Jeker wrote: > > After all this slowcgi timeout fixing, here a similar thing for bgplgd(8). > > If the timeout fires, kill the bgpctl command first with SIGTERM then with > > SIGKILL.

Re: em(4) multiqueue

2022-08-12 Thread Hrvoje Popovski
On 28.6.2022. 15:11, Jonathan Matthew wrote: > This adds the (not quite) final bits to em(4) to enable multiple rx/tx queues. > Note that desktop/laptop models (I218, I219 etc.) do not support multiple > queues, > so this only really applies to servers and network appliances (including > APU2).

Re: softraid(4) RAID 1C boot support on amd64

2022-08-12 Thread Stefan Sperling
On Fri, Aug 12, 2022 at 03:20:40PM +0200, Stefan Sperling wrote: > I am currently trying to find time in order to test my patch on > real hardware. Any additional testing would be very welcome. I found time :) Tested on real hardware with 4 disks. Both biosboot and UEFI boot are working as

Re: rpki-client: disallow inherit in ROA EE IP Resources extension

2022-08-12 Thread Theo Buehler
On Wed, Aug 10, 2022 at 06:16:30PM +0200, Theo Buehler wrote: > On Wed, Aug 10, 2022 at 03:10:19PM +, Job Snijders wrote: > > Hi all, > > > > An errata exists for RFC 6482, which informs us: """The EE certificate > > MUST NOT use "inherit" elements as described in [RFC3779].""" Read the > >

Re: ix(4): Add support for TCP Large Receive Offloading

2022-08-12 Thread Hrvoje Popovski
On 25.6.2022. 22:29, Jan Klemkow wrote: > There is a bug in the firmware of ix(4) NICs, at least with chip 82599 and > x540. I could not test it with x550 chips, but i guess they have the same > bug. Hi, I've tested tso with latest snapshot on x552 with or without vlan and everything seems to

Re: softraid(4) RAID 1C boot support on amd64

2022-08-12 Thread Stefan Sperling
On Fri, Aug 12, 2022 at 07:28:57PM +0200, Stefan Sperling wrote: > On Fri, Aug 12, 2022 at 03:20:40PM +0200, Stefan Sperling wrote: > > I am currently trying to find time in order to test my patch on > > real hardware. Any additional testing would be very welcome. > > I found time :) > > Tested

softraid raid1c keydisk cosmetic fix

2022-08-12 Thread Stefan Sperling
Use raid1c-specific meta-data while looking for a key disk that belongs to a RAID 1C volume. By dumb luck this is only a cosmetic issue, because struct layout happens to put the field in the same place. ok? diff a87e94ce1617958c99b63ed0a056e46650a27375 ba39970f6365aeeb1b486101f6573c60b7f88573

Re: store pf rules in a tree

2022-08-12 Thread Alexandr Nedvedicky
Hello Stefan, On Wed, Aug 10, 2022 at 02:38:16PM +, Stefan Butz wrote: > Hi everyone, > > this mail includes a patch to store pf rules in a red-black tree. > Currently they are stored in a linked list. > My system configured with 16000 rules takes about 10 minutes > to print them out using

Re: softraid(4) RAID 1C boot support on arm64

2022-08-12 Thread Stefan Sperling
On Fri, Aug 12, 2022 at 09:41:59AM +, Klemens Nanni wrote: > Here's the adapted diff for arm64 minus manual bits to avoid churn for > now. > > installboot(8) needs softraid(4) support (see my diff on tech@), but > besides that, root on passphrase 1C softraid on arm64 works as expected: > >

Re: arm64: installboot: support softraid

2022-08-12 Thread Stefan Sperling
On Thu, Aug 11, 2022 at 03:51:17PM +, Klemens Nanni wrote: > Booting off softraid on arm64 is supported but installboot(8) has no > softraid(4) support on arm64. > > This means installboot always copies the single bootstrap efiboot on the > root volume and completely ignores softraid chunks,

Re: arm64: installboot: support softraid

2022-08-12 Thread Klemens Nanni
On Thu, Aug 11, 2022 at 03:51:17PM +, Klemens Nanni wrote: > Booting off softraid on arm64 is supported but installboot(8) has no > softraid(4) support on arm64. > > This means installboot always copies the single bootstrap efiboot on the > root volume and completely ignores softraid chunks,

rpki-client: add ASPA profile-10 support

2022-08-12 Thread Job Snijders
Dear all, The below changeset extends rpki-client(8) to validate and emit Autonomous System Provider Authorizations (ASPAs) in JSON format for consumption in other routing stacks. The ASPA CMS protected content type is specified here: