bridge and maximum MAC entries

2004-11-22 Thread Iasen Kostov
Hi, if I understand next code correctly maximum number of MACs is bound to maximum number of ports ?!?. Why is that ? code from net/bridge.c: c[n_clusters].my_macs = (struct bdg_addr *) malloc(BDG_MAX_PORTS * sizeof(struct bdg_addr), M_IFADDR, M_NOWAIT | M_ZERO); T

Re: Large NAT: ipf/ipnat, pf - opinions?

2004-11-22 Thread Max Laier
On Monday 22 November 2004 19:29, Pawel Malachowski wrote: > I'm interested in opinions/comparisons how ipnat and pf perform > on FreeBSD 5.x in real working large NAT setups (about 50Mbit/s, few > thousands of workstations, 300k of mappings or more). Problems noticed, > memory and CPU consumption

Re: gif4) & AltQ

2004-11-22 Thread Max Laier
On Monday 22 November 2004 19:23, Brooks Davis wrote: > On Mon, Nov 22, 2004 at 02:30:28PM +0100, Eric Masson wrote: > > Hello, > > > > In a vpn application, I'm using gif tunnels backed by ipsec transport > > mode beetween two hosts on the Internet. > > > > Is there any hope to see gif(4) modified

Large NAT: ipf/ipnat, pf - opinions?

2004-11-22 Thread Pawel Malachowski
Hello, I'm interested in opinions/comparisons how ipnat and pf perform on FreeBSD 5.x in real working large NAT setups (about 50Mbit/s, few thousands of workstations, 300k of mappings or more). Problems noticed, memory and CPU consumption, mbufs utilization etc. TIA, -- Paweł Małachowsk

Re: gif4) & AltQ

2004-11-22 Thread Brooks Davis
On Mon, Nov 22, 2004 at 02:30:28PM +0100, Eric Masson wrote: > Hello, > > In a vpn application, I'm using gif tunnels backed by ipsec transport > mode beetween two hosts on the Internet. > > Is there any hope to see gif(4) modified to integrate AltQ framework or > is there any reason (except lack

Re: Gateway/Router

2004-11-22 Thread Eric W. Bates
Ip forwarding is on? Flag in rc.conf: gateway_enable=yes Will toggle: net.inet.ip.forwarding=1 Anton Bester wrote: From the client can you ping the IP of ed0 ping 126...66 I think ping IP of ed0 196...66 from client, no problem, but cannot ping 196...65, which is my cisco router to the outside. M

gif4) & AltQ

2004-11-22 Thread Eric Masson
Hello, In a vpn application, I'm using gif tunnels backed by ipsec transport mode beetween two hosts on the Internet. Is there any hope to see gif(4) modified to integrate AltQ framework or is there any reason (except lack of maintainer/coder time) that would be a showstopper ? TIA Regards Eri

Re: SACK (and PF) wierdness

2004-11-22 Thread Daniel Hartmeier
Pawel, could you provide a tcpdump -nvvvSXpi for an entire connection, from handshake to the point where it stalls? Please include the corresponding 'BAD state'/'State failure' messages and output of pfctl -vvss related to the connection (ideally all for the same connection, so timestamps are comp

Current problem reports assigned to you

2004-11-22 Thread FreeBSD bugmaster
Current FreeBSD problem reports Critical problems Serious problems S Submitted Tracker Resp. Description --- o [2002/07/26] kern/41007 net overfull traffic on third and fourth adap o [2003/10/14] kern