Re: kernel hang when reboot with loaded ip_vs_rr.ko

2009-05-09 Thread Sam Wun
It is IPVS patch, for FreeBSD. I am in Melbourne Australia. Can you send me email regarding about how to fix this issue? BTW, if I kldunload ip_vs_rr before reboot/shutdown, the system will execute the reboot / shutdown normally. When I executed reboot/shutdown with the ip_vs_rr still loaded in the

kernel hang when reboot with loaded ip_vs_rr.ko

2009-05-09 Thread Sam Wan
I built ip_vs_rr.ko in 7.2 Release. There is no problem when loaded ipvs.ko. After I loaded ip_vs_rr.ko, and reboot the system, the entire system is hang. Here is a list of the ip_vs moudles have built: modules # ls -l total 118 drwxr-xr-x 2 root wheel512 May 8 15:20 ./ drwxr-xr-x 8 root

Re: IPSEC_ESP and IPSEC_FILTERGIF in 7.2 kernel config file

2009-05-09 Thread Mike Tancsa
At 10:14 PM 5/9/2009, Sam Wan wrote: How do I enable ipsec in 7.2? do I have to rebuild the kernel with the IPSEC options built-in? and which options are supported at the moment? On 7.x, you need to rebuild your kernel with options IPSEC device crypto and optionally options IPSE

IPSEC_ESP and IPSEC_FILTERGIF in 7.2 kernel config file

2009-05-09 Thread Sam Wan
I tried to build a kernel include the following options, but it failed with something like "unknown option IPSEC_ESP and IPSEC_FILTERGIF..." options IPSEC #IP security options IPSEC_ESP #IP security options IPSEC_FILTERGIF #filter ipsec pac

Re: Can pfsync be used over router or WAN?

2009-05-09 Thread Bruce Simpson
Sam Wun wrote: Establish a IPSEC bewteen this 2 pfsync points is a way to go. Yup. The key observation about pfsync is that you can configure the peer(s) for synchronization in the 'syncdev' mode or the 'syncpeer' mode. Unlike CARP, pfsync(4) has no authentication built-in. With syncdev,