Re: Guest network on corporate LAN - options for security

2013-02-06 Thread Kurt Buff
On Wed, Feb 6, 2013 at 11:38 AM, Adam Vande More wrote: > On Wed, Feb 6, 2013 at 1:29 PM, Kurt Buff wrote: >> >> All, >> >> If this isn't the right list for this, please let me know. >> >> Quite some time ago, I set up an unsecured guest VLAN in our network, >> providing wireless access to all of

Re: Guest network on corporate LAN - options for security

2013-02-06 Thread Adam Vande More
On Wed, Feb 6, 2013 at 1:29 PM, Kurt Buff wrote: > All, > > If this isn't the right list for this, please let me know. > > Quite some time ago, I set up an unsecured guest VLAN in our network, > providing wireless access to all of the sundry devices that staff and > visitors carry. I set up a sma

Guest network on corporate LAN - options for security

2013-02-06 Thread Kurt Buff
All, If this isn't the right list for this, please let me know. Quite some time ago, I set up an unsecured guest VLAN in our network, providing wireless access to all of the sundry devices that staff and visitors carry. I set up a small FreeBSD machine to serve IP addresses via DHCP, and that was

Re: [PATCH] Add a new TCP_IGNOREIDLE socket option

2013-02-06 Thread Alfred Perlstein
On 2/6/13 4:46 AM, John Baldwin wrote: On Wednesday, February 06, 2013 6:27:04 am Randall Stewart wrote: John: A burst at line rate will *often* cause drops. This is because router queues are at a finite size. Also such a burst (especially on a long delay bandwidth network) cause your RTT to in

Re: Make kernel aware of NIC queues

2013-02-06 Thread Luigi Rizzo
On Wed, Feb 06, 2013 at 11:05:59AM -0500, George Neville-Neil wrote: > > On Feb 6, 2013, at 09:37 , Luigi Rizzo wrote: ... > > Linux has tried to come up with a common framework to implement > > this kind of controls using "ethtool", and we should probably > > have a look at their approach and re

Re: Make kernel aware of NIC queues

2013-02-06 Thread George Neville-Neil
On Feb 6, 2013, at 09:37 , Luigi Rizzo wrote: > On Wed, Feb 06, 2013 at 06:19:27PM +0400, Alexander V. Chernikov wrote: >> Hello list! >> >> Today more and more NICs are capable of splitting traffic to different >> Rx/TX rings permitting OS to dispatch this traffic on different CPU >> cores.

Re: Make kernel aware of NIC queues

2013-02-06 Thread Luigi Rizzo
On Wed, Feb 06, 2013 at 06:19:27PM +0400, Alexander V. Chernikov wrote: > Hello list! > > Today more and more NICs are capable of splitting traffic to different > Rx/TX rings permitting OS to dispatch this traffic on different CPU > cores. However, there are some problems that arises from using

Make kernel aware of NIC queues

2013-02-06 Thread Alexander V. Chernikov
Hello list! Today more and more NICs are capable of splitting traffic to different Rx/TX rings permitting OS to dispatch this traffic on different CPU cores. However, there are some problems that arises from using multi-nic (or even singe multi-port NIC) configurations: Typical (OS) question

Re: [PATCH] Add a new TCP_IGNOREIDLE socket option

2013-02-06 Thread John Baldwin
On Wednesday, February 06, 2013 6:27:04 am Randall Stewart wrote: > John: > > A burst at line rate will *often* cause drops. This is because > router queues are at a finite size. Also such a burst (especially > on a long delay bandwidth network) cause your RTT to increase even > if there is no dro

Re: [PATCH] Add a new TCP_IGNOREIDLE socket option

2013-02-06 Thread Randall Stewart
John: In-line On Jan 24, 2013, at 11:14 AM, John Baldwin wrote: > On Thursday, January 24, 2013 3:03:31 am Andre Oppermann wrote: >> On 24.01.2013 03:31, Sepherosa Ziehau wrote: >>> On Thu, Jan 24, 2013 at 12:15 AM, John Baldwin wrote: On Wednesday, January 23, 2013 1:33:27 am Sepherosa Zi

Re: [PATCH] Add a new TCP_IGNOREIDLE socket option

2013-02-06 Thread Randall Stewart
John: A burst at line rate will *often* cause drops. This is because router queues are at a finite size. Also such a burst (especially on a long delay bandwidth network) cause your RTT to increase even if there is no drop which is going to hurt you as well. A SHOULD in an RFC says you really real

Re: Data Center Bridging?

2013-02-06 Thread Randall Stewart
Lars/Jack: I am pretty sure that my company would be interested in it as well.. and I can help out here too ;-) Jack: are there particular versions of Intel cards that this needs to be on (we have both igb and ix cards in my office now).. thanks. R On Jan 22, 2013, at 10:43 AM, Eggert, L

Re: Driver patch to look at...

2013-02-06 Thread Randall Stewart
Good idea… I will commit this late today.. just in case there are any trailing comments ;-) R On Feb 5, 2013, at 3:52 PM, John Baldwin wrote: > On Tuesday, February 05, 2013 2:30:36 pm Randall Stewart wrote: >> Ok >> >> Here it is one last time (I hope) with the updates ;-) > > One more sugge

Re: Data Center Bridging?

2013-02-06 Thread Eggert, Lars
Hi Jack, On Jan 22, 2013, at 19:23, Jack Vogel wrote: > I have never implemented this in the FreeBSD drivers primarily because the > motivation for it say, in Linux, > was to handle multiple traffic classes, for instance FCOE or iSCSI, but > FreeBSD has not had these features > to implement this