On 12.1.2017. 18:27, Hrvoje Popovski wrote: > On 12.1.2017. 16:20, Martin Pieuchot wrote: >> On 10/01/17(Tue) 10:37, Martin Pieuchot wrote: >>> In pfkey_sendup() we call sorwakeup() which asserts for NET_LOCK(), so >>> we are already at IPL_SOFTNET. >>> >>> pfkeyv2_send() is called via pfkey_output() which is also called with >>> the NET_LOCK() held. >>> >>> Finally replace a comment above pfkeyv2_ipo_walk() by the corresponding >>> assert. >> Anybody tested or reviewed this diff? >> > > > I applied this diff in production box with > > carp > pf > pfsync > isakmpd -K4 > sasyncd > dhcpd > dhcpd sync > tcpdump -lnqttti pflog0
and pflow ipfix and still solid as rock :)
