freebsd 4.7-stable kernel gre tunnel support for squid's wccp cisco interaction

2002-12-11 Thread Gokhan Eryol
Hello,

I upgraded /usr/src from 4.7-RELEASE to 4.7-STABLE by cvs and trying
to compile it for transparent web-caching with squid (wccp support). I
tried the steps described in
http://www.squid-cache.org/Doc/FAQ/FAQ-17.html as i did before. I knew
from older experiences that the gre.patch given here was wrong in last
part (cause of removed  "__P(...)" stuffs in the file ip_var.h) so you
had to do the changes manually. However, by the date 20-Nov-2002, new
patch released at
http://www.squid-cache.org/WCCP-support/FreeBSD-4.x/4.7-gre.patch .
Unfortunately, even this patch's last part designed for 4.7 - ip_var.h
format, again fails for 4.7-STABLE, so you have to do the last part
manually again (line 185 at /usr/src/sys/netinet/ip_var.h changed from
"void   ipip_input(struct mbuf *, int, int);" to "extern  void   
(*ipip_input)(struct mbuf *, int, int);"  ).

Real problems starts here. Firstly, when you do the gre patches for
wccp support, and try the compile the kernel with "option GRE",
following error appears:

In file included from /usr/src/sys/net/if_gre.c:77:
/usr/src/sys/netinet/ip_var.h:184: conflicting types for `gre_input'
/usr/src/sys/netinet/ip_gre.h:41: previous declaration of `gre_input'
/usr/src/sys/netinet/ip_var.h:184: warning: redundant redeclaration of
`gre_input' in same scope
/usr/src/sys/netinet/ip_gre.h:41: warning: previous declaration of
`gre_input'
/usr/src/sys/net/if_gre.c:120: warning: initialization from
incompatible pointer type
/usr/src/sys/net/if_gre.c:120: warning: initialization from
incompatible pointer type
/usr/src/sys/net/if_gre.c:127: warning: initialization from
incompatible pointer type
/usr/src/sys/net/if_gre.c:127: warning: initialization from
incompatible pointer type
*** Error code 1

Stop in /usr/obj/usr/src/sys/BIGMETUCACHE.
*** Error code 1

Stop in /usr/src.
*** Error code 1

Stop in /usr/src.


I realized the file /usr/src/sys/netinet/ip_gre.h with the line "void
gre_input(struct mbuf *, ...);" but the patch defined it as "void  
gre_input(struct mbuf *, int, int);" ip ip_var.h file. The file is
changed at 1.Dec.2002 . I tried some other things but didn't work. 

How can i enable wccp support on FreeBSD-4.7-STABLE updated today?

I would appreciate any suggestions.
Thanks,
Gokhan ERYOL

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-net" in the body of the message



Re: freebsd 4.7-stable kernel gre tunnel support for squid's wccpcisco interaction

2003-01-10 Thread gokhan eryol
On Wed, 11 Dec 2002, Helge Oldach wrote:

> Gokhan Eryol:
> > I upgraded /usr/src from 4.7-RELEASE to 4.7-STABLE by cvs and trying
> > to compile it for transparent web-caching with squid (wccp support). I
> > tried the steps described in
> > http://www.squid-cache.org/Doc/FAQ/FAQ-17.html as i did before.
>
> I believe this should be mostly obsolete. GRE has been incorporated into
> STABLE on 1st December, so you shouldn't need to patch anything any
> more. Probably you will just have to configure a gre interface and make
> squid talk to that.

I tried some combinations, but unable to success the WCCP communication on
GRE tunnel. However, Henrik, from squid-cache.org, warn me about there may
not be WCCP support to an existing GRE module.
Any suggestion will be appreciated.

Regards,
Gokhan ERYOL



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-net" in the body of the message



freebsd 4.7-stable kernel gre support for squid's wccp cisco interaction

2003-01-15 Thread Gokhan ERYOL
Hi all,

I need any suggestions about GRE support of 4.7 stable series of 
FreeBSD, because of the fact that squid's WCCP communication to Cisco 
devices over GRE is NOT working. At squid side, a patch for FreeBSD is 
available, but after the incorporation of GRE into STABLE on 1st 
December, it's not applicable. On the other hand, creating GRE 
interface, tunneling between Cisco device and BSD box, is not working 
for WCCP.

Henrik Nordstrom from squid-cache.org, warn me about WCCP/GRE 
encapsulation may not be included in FreeBSD STABLE. Is it possible to 
add WCCP support on existing GRE module?

Regards,
Gokhan ERYOL








To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-net" in the body of the message


Re: pseudo-device gre and wccp/squid

2003-02-02 Thread Gokhan ERYOL
Actually, since  "A gre(4) driver, which can encapsulate IP packets 
using GRE (RFC 1701) or minimal IP encapsulation for Mobile IP (RFC 
2004), has been added", WCCP over GRE has not been working on FreeBSD 
Stable systems, because there is no WCCP support in new GRE driver. I 
tried the same things as you did. I e-mailed this situation several 
times to lists since 12/11/2002, but there is no action.

Henrik Nordstom from squid-cache.org, said that adding WCCP support to 
an existing GRE module is in most cases trivial as the packet format is 
identical to plain IP over GRE except for the protocol type, and that 
GRE is only used in one direction (Router -> Proxy) not as a 
bidirectional tunnel.

Regards
Gokhan ERYOL

Faried Nawaz wrote:

Hello,

Is anyone using the gre pseudo-device with squid for WCCP?  Try as I might
I can't get it to work for me.

I'm using FreeBSD 4.7-STABLE, using ipfilter's ipnat to redirect packets.
I've done

ifconfig gre0 create
ifconfig gre0 aaa.bbb.ccc.ddd fff.ggg.hhh.iii netmask 255.255.255.255 link0 up
ifconfig gre0 tunnel aaa.bbb.ccc.ddd fff.ggg.hhh.iii 

aaa.bbb.ccc.ddd is the web proxy's ip, fff.ggg.hhh.iii is the router's.

ipnat.rules has

rdr gre0 0.0.0.0/0 port 80 aaa.bbb.ccc.ddd port 8080 tcp

ipfilter is set to pass through all traffic, and there are no firewall rules
defined.

tcpdump on my ethernet interface shows gre packets coming in.

04:07:39.093205 fff.ggg.hhh.iii > aaa.bbb.ccc.ddd: gre gre-proto-0x883E

tcpdump on my gre0 interface shows incoming connections from the users, and
ipnat -l shows lots of redirects.

proxy1# ipnat -l | head
List of active MAP/Redirect filters:
rdr gre0 0.0.0.0/0 port 80 -> aaa.bbb.ccc.ddd port 8080 tcp

List of active sessions:
RDR aaa.bbb.ccc.ddd   8080  <- -> 207.44.178.61   80[203.215.178.61 4122]
RDR aaa.bbb.ccc.ddd   8080  <- -> 205.188.250.25  80[203.215.178.19 1612]
RDR aaa.bbb.ccc.ddd   8080  <- -> 66.51.99.15780[66.206.32.180 3769]
RDR aaa.bbb.ccc.ddd   8080  <- -> 64.94.89.23880[203.215.177.248 1172]
RDR aaa.bbb.ccc.ddd   8080  <- -> 207.46.104.20   80[66.206.33.7 1601]
proxy1#

However, none of them get to squid.

Everything worked fine before the upgrade, but I was using the gre patch
from squid's web site to do the work.  The new pseudo-device appears to
have WCCP-specific code in it, but it's not working.

Does anyone have this working?  Anyone at all?  I'm willing to break
down and switch to ipfw if that'll help, but I can't upgrade my machines
to 4.7 (and higher) properly without a fix.  Surely someone has used this
since the code was commited.

(A hack would be to comment out all code related to the pseudo-device so
I can use the wccp-specific gre.c.)


Faried.
 





To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-net" in the body of the message



Re: wccp- squid and gre interface

2003-03-21 Thread Gokhan ERYOL
Ismail YENIGUL wrote:

do i need to create gre interface and tunnel to solve this problem. ?
 

Yes,
follow the link
http://docs.freebsd.org/cgi/getmsg.cgi?fetch=45552+0+archive/2003/freebsd-net/20030209.freebsd-net

Regards,
Gokhan ERYOL
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-net" in the body of the message