On Wed, Apr 18, 2012 at 12:53:43PM +1200, Andrew Thompson wrote:
> What we also need is a event trigger for
> various pseudo interfaces when the mac or primary interface changes,
> this would allow arp/nd6 to rebroadcast.
Yes, we're working something like this specifically for lagg but it
should
On 18 April 2012 12:39, Ed Maste wrote:
> When a new lagg(4) interface is created the link layer address from the
> first port in the group is assigned to the lagg and to all other lagg
> port members. This means the address assigned to the lagg is different
> if specified as, for example, "laggp
When a new lagg(4) interface is created the link layer address from the
first port in the group is assigned to the lagg and to all other lagg
port members. This means the address assigned to the lagg is different
if specified as, for example, "laggport em0 laggport em1" vs
"laggport em1 laggport e
We're running a service with a 82576 configured with 4 queues and a
maxed rxd/txd configuration:
http://people.freebsd.org/~sbruno/igb_stats.txt
We still see, under higher load spikes, a tendency to drop packets (I
suspect an application issue at this point, but want to attempt to
alleviate some
On Tue, Apr 17, 2012 at 12:58 PM, Michael Sierchio wrote:
> On Tue, Apr 17, 2012 at 12:48 PM, Kevin Oberman wrote:
>>
>>
>> But I do have to ask why you find statefull rules for outgoing TCP
>> connections desirable? Why not:
>> 00101 allow tcp from me to any established
>>
> It's useful and appr
On Tue, Apr 17, 2012 at 12:48 PM, Kevin Oberman wrote:
>
> But I do have to ask why you find statefull rules for outgoing TCP
> connections desirable? Why not:
> 00101 allow tcp from me to any established
>
> It's useful and appropriate to have outbound connections be stateful.
It's not a good i
On Tue, Apr 17, 2012 at 4:05 AM, Dmitry S. Kasterin wrote:
> (Cross-posting this to net@ since there was no reply on ipfw@.)
>
> Hello!
>
> I have rather simple ipfw ruleset like this:
>
> 1 allow all from any to any via lo0
>
> 00010 check-state
> 00101 allow tcp from me to any out setup keep
(Cross-posting this to net@ since there was no reply on ipfw@.)
Hello!
I have rather simple ipfw ruleset like this:
1 allow all from any to any via lo0
00010 check-state
00101 allow tcp from me to any out setup keep-state
65533 deny log ip from any to any
65534 deny ip6 from any to any
Ac
