Re: FreeBSD 5 ip_gre and netisr_enable=1

2005-08-26 Thread Robert Watson
On Thu, 25 Aug 2005, ming fu wrote: when a GRE packet gets into the ip_gre2(), its gre header is stripped and sent to netisr_dispatch() for ip_input() processing again. In case, the net.isr.enable is 1, the packet will be delivered to ip_input directly instead of put in the queue. Probably,

Re: Aggregate network interfaces

2005-08-26 Thread Jeremie Le Hen
Hi, > - Gig cards are cheap. > - PCI bus throughput is really bad (like 32MB/s) > - There is no easy way to "bond" on FreeBSD, but you can just use multiple > IP addresses. It would be cool to have something like Etherchannel, but > that doesn't work. Solaris has Etherchannel. For the sake o

Re: Aggregate network interfaces

2005-08-26 Thread Paul Khavkine
YOu can try ng_fec which is Etherchannel, not sure if it works in FreeBSD 5.x properly, it did in 4.x Cheers Paul On Fri, 26 Aug 2005, Dave+Seddon wrote: >Greetings, > > - Gig cards are cheap. > - PCI bus throughput is really bad (like 32MB/s) > - There is no easy way to "bond" on FreeBSD, but

Re: Filtering jail IP traffic

2005-08-26 Thread Attila Nagy
Anders Nordby wrote: IP traffic from one jail to another jail, arrives on destination jail on lo0 having the destination jails IP as source IP. Why not the source jail's IP address? How can I filter traffic from one jail to another, using ipfw of ipf? AFAIK (at least with pf), you can't really fi

Filtering jail IP traffic

2005-08-26 Thread Anders Nordby
Hi, IP traffic from one jail to another jail, arrives on destination jail on lo0 having the destination jails IP as source IP. Why not the source jail's IP address? How can I filter traffic from one jail to another, using ipfw of ipf? Cheers, -- Anders.