And my final followup: It appears that "allow_unfiltered_promisc" is silently ignored for non-kvm zone brands (ref /usr/lib/brand/joyent/statechange). Is there a particular reason for that? I understand that it's a powerful and dangerous option, but it's already relatively difficult to enable. Is there any way to work around this, short of rolling my own boot image/platform image?
Bill January 29, 2018 9:41 PM, "H. William Welliver III" <[email protected] (mailto:%22H.%20William%20Welliver%20III%22%20<[email protected]>)> wrote: Hi Jason, Thanks for the tip about libdlpi… the existing approach seems a little brittle so I’ll have a look at this. As for the vnic protection flags, I’ve definitely been able to save the “allow_unflitered_promisc” option using vmadm, but it doesn’t seem to take effect, despite being present and in the zone configuration. If I set it manually using dladm, it reverts after a zone reboot. I am just a little bit puzzled. On Jan 29, 2018, at 7:47 PM, Jason King <[email protected] (mailto:[email protected])> wrote: For the SoftEther code changes, I’d suggest looking into libdlpi(3DLPI). It’ll take care of most of the DLPI details for you (including handling both style 1 and style 2 devices — it sounds like it can’t handle style 1 devices — e.g. /dev/net0), it’s also something that’s been around since Solaris 10 IIRC, so there shouldn’t much compatibility concerns. As for the dladm properties, those are usually set via vmadm(1M) in SmartOS and persisted as part of a zone configuration (look at the various nics.* properties). If you’re trying to do this for interfaces in the global zone, I’m not aware of any method of persisting it for global zone devices (you’d probably just need to script it). smartos-discuss | Archives (https://www.listbox.com/member/archive/184463/=now) (https://www.listbox.com/member/archive/rss/184463/29348524-04b3e250) | Modify (https://www.listbox.com/member/?&;) Your Subscription (http://www.listbox.com) ------------------------------------------- smartos-discuss Archives: https://www.listbox.com/member/archive/184463/=now RSS Feed: https://www.listbox.com/member/archive/rss/184463/25769125-55cfbc00 Modify Your Subscription: https://www.listbox.com/member/?member_id=25769125&id_secret=25769125-7688e9fb Powered by Listbox: http://www.listbox.com
