Update on altq and interface groups

[Olivier Mehani]

Hi list,

I know this question has been asked before, but I'm after an up-to-date
answer, or at least a confirmation.

Has support for interface groups been implemented for altq? By that, I mean
the
possibility to use an interface group name with baltq on GROUPb to set up
similar queues for each of the interfaces of the group. This could be used to
not have to explicitly name the interfaces but rather refer to their current
role. The outgoing traffic for all the interfaces could also be classified
with
only one ruleset of bpass out on GROUPbs.

Unfortunately, the changelogs and my small experiments (see below) seem to
hint that
it's not supported. But maybe I'm (doing it) wrong?

opera...@mudrublic:~$ /sbin/ifconfig
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 33200
(...)
ath0: flags=8963<UP,BROADCAST,NOTRAILERS,RUNNING,PROMISC,SIMPLEX,MULTICAST>
mtu 1500
(...)
        groups: wlan internal
(...)
sis0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
(...)
        groups: egress
(...)

Relevant beginning of pfctl.conf:

UPLINK_BANDWIDTH = "90Mb"
set skip on lo
set loginterface public
altq on egress priq bandwidth $UPLINK_BANDWIDTH queue {std_out,
interactive_out, dns_out, tcp_ack_out}
queue std_out priq(default)
queue interactive_out priority 4 prirq(red)
queue dns_out priority 5
queue tcp_ack_out priority 6
(...)
pass out on egress proto tcp to any flags S/SA keep state queue(std_out,
tcp_ack_out)
pass out on egress proto { tcp udp } to any port domain keep state queue
dns_out
pass out on egress proto tcp to any port ssh flags S/SA keep state
queue(std_out, interactive_out)


$ sudo pfctl -vf /etc/pf.conf
set skip on { lo }
set loginterface public
UPLINK_BANDWIDTH = "90Mb"
pfctl: SIOCGIFMTU: Device not configured

This error doesn't happen if I replace egress with sis0 in the baltq onb
line
(pretty bad omen, I guess...).

$ uname -a
OpenBSD mudrublic.narf.ssji.net 4.6 GENERIC#58 i386

Thanks.

--
Olivier Mehani <sht...@ssji.net>
PGP fingerprint: 4435 CF6A 7C8D DD9B E2DE  F5F9 F012 A6E2 98C6 6655

[demime 1.01d removed an attachment of type application/pgp-signature]