Re: Strongswan problem (used to work for client NAT to the Internet, no longer does)

2014-03-22 Thread Karl Denninger
On 3/22/2014 5:44 PM, Karl Denninger wrote: FreeBSD-STABLE 10 r263037M Configuration has outside IPSEC connections coming in to Strongswan which should then be able to NAT back out to the Internet. The premise here is that "roaming" people may connect to this box and obtain both access to "

Re: 9.2 ixgbe tx queue hang

2014-03-22 Thread Rick Macklem
Christopher Forgeron wrote: > > > > > > > Ah yes, I see it now: Line #658 > > #if defined(INET) || defined(INET6) > /* Initialize to max value. */ > if (ifp->if_hw_tsomax == 0) > ifp->if_hw_tsomax = IP_MAXPACKET; > KASSERT(ifp->if_hw_tsomax <= IP_MAXPACKET && > ifp->if_hw_tsomax >= IP_MAXPAC

Re: Minor nits with netmap(4) manpage

2014-03-22 Thread Mark Delany
> 2) the manpage refers to NR_RING_NIC_SW when I think it means >NR_REG_NIC_SW. Found another. 2a) manpage refers to NR_REG_SW_NIC when the include file has NR_REG_SW To summarize: manpageinclude NR_REG_ALL_NIC NR_REG_SW_NIC NR_REG_SW NR_RING_NIC_SW NR_

Strongswan problem (used to work for client NAT to the Internet, no longer does)

2014-03-22 Thread Karl Denninger
FreeBSD-STABLE 10 r263037M Configuration has outside IPSEC connections coming in to Strongswan which should then be able to NAT back out to the Internet. The premise here is that "roaming" people may connect to this box and obtain both access to "inside" resources and outside Internet access,

Re: 9.2 ixgbe tx queue hang

2014-03-22 Thread Rick Macklem
Christopher Forgeron wrote: > > > > > > > Ah yes, I see it now: Line #658 > > #if defined(INET) || defined(INET6) > /* Initialize to max value. */ > if (ifp->if_hw_tsomax == 0) > ifp->if_hw_tsomax = IP_MAXPACKET; > KASSERT(ifp->if_hw_tsomax <= IP_MAXPACKET && > ifp->if_hw_tsomax >= IP_MAXPAC

Re: 9.2 ixgbe tx queue hang

2014-03-22 Thread Rick Macklem
Christopher Forgeron wrote: > Status Update: Hopeful, but not done. > > So the 9.2-STABLE ixgbe with Rick's TSO patch has been running all > night > while iometer hammered away at it. It's got over 8 hours of test time > on > it. > > It's still running, the CPU queues are not clogged, and everyth

Re: [PATCH 2/6] sfxge: limit software Tx queue size

2014-03-22 Thread Adrian Chadd
> Btw, there are some opinions that with modern cards any software > queing is a bad idea. Driver should simply hold as much as hardware > tx ring can hold. There is no yet stable decision about this, just > thoughts floating around. The drbr queue gives the driver the ability to source packets fr

relayd ssl failure

2014-03-22 Thread Thomas Johnson
Hello, I've been trying to sort out an issue with relayd, and I'm just not having any luck. I am setting up a new load-balancer using net/relayd (5.4.20131122_2) on 10.0-RELEASE. My configuration is pretty simple; a pair of web servers , sitting behind the relayd host. I have a httpd instance runn

Re: [PATCH 2/6] sfxge: limit software Tx queue size

2014-03-22 Thread Gleb Smirnoff
Andrew, On Sat, Mar 22, 2014 at 02:16:24PM +0400, Andrew Rybchenko wrote: A> > The interaction between sfxge_tx_qdpl_put() and sfxge_tx_packet_add() A> > is quite complex and I couldn't resist from suggesting you to A> > simplify the code. A> > A> > Can you please look into attached patch? A> >

Re: 9.2 ixgbe tx queue hang

2014-03-22 Thread Christopher Forgeron
Status Update: Hopeful, but not done. So the 9.2-STABLE ixgbe with Rick's TSO patch has been running all night while iometer hammered away at it. It's got over 8 hours of test time on it. It's still running, the CPU queues are not clogged, and everything is functional. However, my ping_logger.py

Re: [PATCH 2/6] sfxge: limit software Tx queue size

2014-03-22 Thread Andrew Rybchenko
Gleb, On 03/18/2014 05:24 PM, Gleb Smirnoff wrote: Andrew, On Tue, Mar 18, 2014 at 01:55:01PM +0400, Andrew Rybchenko wrote: A> sfxge: limit software Tx queue size A> A> Previous implementation limits put queue size only (when Tx lock can't A> be acquired), A> but get queue may grow unbounde