82599EB not supported by ixgbe(4)

2012-06-09 Thread Nikolay Denev
Hello Jack, It seems the following controller is not yet supported by ixgbe(4) : none4@pci0:3:0:0: class=0x02 card=0x7b118086 chip=0x154d8086 rev=0x01 hdr=0x00 vendor = 'Intel Corporation' device = '82599EB 10-Gigabit SFP+ Network Connection' class = network

Re: ifconfig accepting hostname as ipv4 address

2012-06-09 Thread Kevin Oberman
On Sat, Jun 9, 2012 at 12:37 AM, Garrett Cooper wrote: > On Sat, Jun 9, 2012 at 12:23 AM, Wojciech Puchar > wrote: >>> input. >>> Moreover, ifconfig em0 some_valid_fqdn/MASK silently ignores it, so you >>> can't set valid CIDR address using this notation. >>> >>> Classful era has ended more than

[commit approval request] sbin/ipfw

2012-06-09 Thread Alexander V. Chernikov
Hello Andrey, Konstantin! Please approve the following commit: -- Update maximum number of tables available in ipfw to reflect changes done in r233478. Approved by: (mentor) MFC after:3 days -- -- WBR, Alexander Index: sbin/ipfw/ipfw.8 ===

Re: ipfw rules consuming CPU

2012-06-09 Thread Sami Halabi
on my box with 130 rules 100Mbit the cpu don't go above 5%. I daily manage 1.5-6GB. Thanks in advance, Sami On Sat, Jun 9, 2012 at 11:21 PM, Michael Spratt < m...@magicislandtechnologies.com> wrote: > I have Linux & FreeBSD systems running ipfw with 80 rules with 70Mb/s > symmetric, passing traf

Re: ipfw rules consuming CPU

2012-06-09 Thread Michael Spratt
I have Linux & FreeBSD systems running ipfw with 80 rules with 70Mb/s symmetric, passing traffic for about 1000-1200 hosts. Alexander V. Chernikov wrote: On 09.06.2012 01:56, Sami Halabi wrote: Hi, I Manage a FreeBSD server as an edge router& firewall. the setup has 10G interfaces (ixgbe-825

Re: if_ipsec

2012-06-09 Thread Eugene Grosbein
10.06.2012 00:07, Jeremie Le Hen пишет: > I'm not sure I've understood what you're asking. As a network engineer, > I'm sure you know there are two modes with IPSec: tunnel and transport. > > Tunnel mode is weird because it practically creates an encrypted tunnel, > but the later is invisible fr

Re: if_ipsec

2012-06-09 Thread Jeremie Le Hen
Hi Eugene, On Fri, Jun 08, 2012 at 11:31:00PM +0600, Eugene M. Zheganin wrote: > Hi. > > I have an idea about new networking feature in FreeBSD. > I guess everyone is having ideas from time to time, and lots of these > idea having people think that they just had a decent idea. However, only > i

Panic with if_bridge when removing components

2012-06-09 Thread Gustau Perez Querol
Hi, I'm seeing panics when removing an interface of a bridge. The system runs HEAD/AMD64 r236733. I see no changes to if_bridge.c in the last two days, so I would say the problem's still there. I also checked stable and the problem should be there too. The problem is that I have a brid

Re: ipfw rules consuming CPU

2012-06-09 Thread Luigi Rizzo
On Sat, Jun 09, 2012 at 03:36:15PM +0400, Alexander V. Chernikov wrote: > On 09.06.2012 15:19, Sami Halabi wrote: > >Hi, > >all rules togther less than 80 rules > However, it is too much. > You should reduce this to 10 rules or less (at least for main traffic flow). you should definitely try h

Re: ipfw rules consuming CPU

2012-06-09 Thread Alexander V. Chernikov
On 09.06.2012 15:19, Sami Halabi wrote: Hi, all rules togther less than 80 rules However, it is too much. You should reduce this to 10 rules or less (at least for main traffic flow). (Btw, there is related http://wiki.freebsd.org/NetworkPerformanceTuning wiki page) how tablearg helps

Re: ipfw rules consuming CPU

2012-06-09 Thread Sami Halabi
Hi, all rules togther less than 80 rules how tablearg helps this? each ip & pipe (up & down) are unique... any other advices? Sami On Sat, Jun 9, 2012 at 1:15 PM, Alexander V. Chernikov wrote: > On 09.06.2012 01:56, Sami Halabi wrote: > >> Hi, >> >> I Manage a FreeBSD server as an edge ro

Re: ipfw rules consuming CPU

2012-06-09 Thread Alexander V. Chernikov
On 09.06.2012 01:56, Sami Halabi wrote: Hi, I Manage a FreeBSD server as an edge router& firewall. the setup has 10G interfaces (ixgbe-82599EB) and 1G interfaces(em-82571EB& bce-BCM5709) connected to 10G/1G switches. With the following setup i get higher cpu usage: bce1-upstream provider with

Re: Netgraph and Netflow-v9

2012-06-09 Thread Alexander V. Chernikov
On 09.06.2012 00:04, Kolasinski, Brent D. wrote: Hi All, I have been doing some tests with the FreeBSD ng_netflow module for netflow generation. I am trying to export v9 netflow records to another server running SiLK (which can receive v9 Netlfow from our Cisco routers just fine). When exporti

Re: recommended 10g cards

2012-06-09 Thread Daniel Braniss
thanks to all that responded! from the rough polling, it seems that the order list is Intel, Myricom Solarflare, Chelsio Now I'll try and 'borrow' some of these. thanks again, danny ___ freebsd-net@freebsd.org mailing list ht

Re: ifconfig accepting hostname as ipv4 address

2012-06-09 Thread Garrett Cooper
On Sat, Jun 9, 2012 at 12:23 AM, Wojciech Puchar wrote: >> input. >> Moreover, ifconfig em0 some_valid_fqdn/MASK silently ignores it, so you >> can't set valid CIDR address using this notation. >> >> Classful era has ended more than 10 years ago, do we still want to keep >> this behavior? >> > wer

Re: ifconfig accepting hostname as ipv4 address

2012-06-09 Thread Wojciech Puchar
input. Moreover, ifconfig em0 some_valid_fqdn/MASK silently ignores it, so you can't set valid CIDR address using this notation. Classful era has ended more than 10 years ago, do we still want to keep this behavior? were not aware of that option, and it is rather stupid option - you should