Re: recommended 10g cards

2012-06-08 Thread Kevin Oberman
On Thu, Jun 7, 2012 at 11:54 PM, Daniel Braniss wrote: > Hi > I will be 'experimenting' with 10g in the next few months, so > I need to buy  some cards, > After googling for some time, I noticed that there is not realy much real > info, and some of it is a bit dated. > Since these cards are pricy,

Re: Configuration problem with IPv6 router ("cannot forward src")

2012-06-08 Thread Bruce Cran
On 05/06/2012 17:23, Bruce Cran wrote: Is there some extra configuration I've likely missed that's needed when using IPv6 via PPP? It turned out to be a problem with PF trying to NAT IPv6 - adding 'inet' to 'nat on $ext_if..." fixed it. -- Bruce Cran ___

ipfw rules consuming CPU

2012-06-08 Thread Sami Halabi
Hi, I Manage a FreeBSD server as an edge router & firewall. the setup has 10G interfaces (ixgbe-82599EB) and 1G interfaces(em-82571EB & bce-BCM5709) connected to 10G/1G switches. With the following setup i get higher cpu usage: bce1-upstream provider with little bandwidth, so i use pipes to limit

Netgraph and Netflow-v9

2012-06-08 Thread Kolasinski, Brent D.
Hi All, I have been doing some tests with the FreeBSD ng_netflow module for netflow generation. I am trying to export v9 netflow records to another server running SiLK (which can receive v9 Netlfow from our Cisco routers just fine). When exporting v9 records from our FreeBSD-9-RELEASE server, we

Re: recommended 10g cards

2012-06-08 Thread Sami Halabi
Hi Danny, I can tell that the 10g 82599 card is stable and works great with ixgbe driver (currently i use 2.3.8 by jack vogel, and the new 2.4 should also be great) on production for daily traffic ranges between 1.5G - 6G+ (i didn't notice any limitation since we didn't push more traffic yet) on fb

Re: if_ipsec

2012-06-08 Thread Stephen Clark
On 06/08/2012 01:31 PM, Eugene M. Zheganin wrote: Hi. I have an idea about new networking feature in FreeBSD. I guess everyone is having ideas from time to time, and lots of these idea having people think that they just had a decent idea. However, only ideas that are complemented by a working

if_ipsec

2012-06-08 Thread Eugene M. Zheganin
Hi. I have an idea about new networking feature in FreeBSD. I guess everyone is having ideas from time to time, and lots of these idea having people think that they just had a decent idea. However, only ideas that are complemented by a working code can be considered by the community, and only

VALE, a Virtual Local Ethernet. http://info.iet.unipi.it/~luigi/vale/

2012-06-08 Thread Luigi Rizzo
We have just completed a netmap extensions that let you build a local high speed switch called VALE which i think can be very useful. http://info.iet.unipi.it/~luigi/vale/ VALE is a software Virtual Local Ethernet whose ports are accessible using the netmap API. Designed to be used as the

Re: recommended 10g cards

2012-06-08 Thread Sean Bruno
On Thu, 2012-06-07 at 23:54 -0700, Daniel Braniss wrote: > Hi > I will be 'experimenting' with 10g in the next few months, so > I need to buy some cards, > After googling for some time, I noticed that there is not realy much real > info, and some of it is a bit dated. > Since these cards are pric

Re: PF "scrub reassemble tcp" makes a packet with invalid TCP checksum depending on the situation

2012-06-08 Thread Damien Fleuriot
On 6/8/12 5:01 PM, Kazuaki ODA wrote: > Hi all, > > Recently I received a e-mail from our customer that he could not browse > our web site. I thought that was strange at first because we and most > people could browse without problems, but he could not...umm, why? > > After some investigation I'

PF "scrub reassemble tcp" makes a packet with invalid TCP checksum depending on the situation

2012-06-08 Thread Kazuaki ODA
Hi all, Recently I received a e-mail from our customer that he could not browse our web site. I thought that was strange at first because we and most people could browse without problems, but he could not...umm, why? After some investigation I've found that our web server ignores SYN packet he s

Re: FreeBSD 8.2-STABLE sending FIN no ACK packets.

2012-06-08 Thread Nikolay Denev
On Jun 8, 2012, at 4:30 AM, Adrian Chadd wrote: > On 7 June 2012 05:41, Nikolay Denev wrote: >> Hello, >> >> I've been pointed out by our partner that we are sending TCP packets with >> FIN flag and no ACK set, which is triggering >> alerts on their firewalls. >> I've investigated, and it appe

Re: [CFT] SMP-friendly pf

2012-06-08 Thread Ermal Luçi
On Fri, Jun 8, 2012 at 8:17 AM, Gleb Smirnoff wrote: >  Hello, networkers! > >  [net@ in Cc, but further discussion should go on pf@] > >  As you already probably know, or some may be don't yet know, the pf(4) > subsystem in FreeBSD is currently working under a single mutex. This mutex > is acquir

Re: ifconfig accepting hostname as ipv4 address

2012-06-08 Thread Jonathan McKeown
On Friday 08 June 2012 09:43:25 Alexander V. Chernikov wrote: > On 08.06.2012 11:20, Jonathan McKeown wrote: > > On Thursday 07 June 2012 17:00:04 Alexander V. Chernikov wrote: > >> Hello list! > >> > >> Since the early days ifconfig(8) has the following functionality: > > > > [hostname in place of

Re: recommended 10g cards

2012-06-08 Thread Daniel Braniss
> > > On Friday, June 8, 2012 at 7:54 AM, Daniel Braniss wrote: > > > Hi > > I will be 'experimenting' with 10g in the next few months, so > > I need to buy some cards, > > After googling for some time, I noticed that there is not realy much real > > info, and some of it is a bit dated. > > Sin

Re: ifconfig accepting hostname as ipv4 address

2012-06-08 Thread Alexander V. Chernikov
On 08.06.2012 11:20, Jonathan McKeown wrote: On Thursday 07 June 2012 17:00:04 Alexander V. Chernikov wrote: Hello list! Since the early days ifconfig(8) has the following functionality: [hostname in place of literal address] Moreover, ifconfig em0 some_valid_fqdn/MASK silently ignores it,

Re: ifconfig accepting hostname as ipv4 address

2012-06-08 Thread Jonathan McKeown
On Thursday 07 June 2012 17:00:04 Alexander V. Chernikov wrote: > Hello list! > > Since the early days ifconfig(8) has the following functionality: [hostname in place of literal address] > Moreover, ifconfig em0 some_valid_fqdn/MASK silently ignores it, so you > can't set valid CIDR address using

Re: recommended 10g cards

2012-06-08 Thread Vlad Galu
On Friday, June 8, 2012 at 7:54 AM, Daniel Braniss wrote: > Hi > I will be 'experimenting' with 10g in the next few months, so > I need to buy some cards, > After googling for some time, I noticed that there is not realy much real > info, and some of it is a bit dated. > Since these cards are p