Re: strongswan ikev2 slow on FreeBSD (DigitalOcean)

2015-07-01 Thread Ermal Luçi
AESNI is not hooked yet to the IPsec stack. On Thu, Jul 2, 2015 at 2:42 AM, Zhihao Yuan wrote: > It might be hypervisor's problem because they use KVM, but here are > some information I have: > > DO smallest instance. > > > uname -a > FreeBSD megashadow2 10.2-PRERELEASE FreeBSD 10.2-PRERELEASE #

Fwd: Integrating OpenSSL app with NetMap [Help needed]

2015-07-01 Thread Rakshith Venkatesh
Hi , As we all know, OpenSSL community moved away from the kernel implementation to a user-space one not so long ago. Now trying to port the latest OpenSSL code into FreeBSD kernel is one of the items i was looking at and after having exhaustive rounds of discussion with relavent stake-holders, we

Re: IPFW divert and suricata

2015-07-01 Thread Julian Elischer
On 7/1/15 10:31 PM, Luigi Rizzo wrote: On Wed, Jul 1, 2015 at 3:15 PM, Oliver Humpage wrote: Hello, I hope this is a good list to post this on, I have a feeling the solution is somewhere obscure in the networking layer. I've set up an IPS system, using: * FreeBSD 10.1 (guest OS, plenty of R

strongswan ikev2 slow on FreeBSD (DigitalOcean)

2015-07-01 Thread Zhihao Yuan
It might be hypervisor's problem because they use KVM, but here are some information I have: DO smallest instance. > uname -a FreeBSD megashadow2 10.2-PRERELEASE FreeBSD 10.2-PRERELEASE #3 r284996: Wed Jul 1 17:58:13 UTC 2015 freebsd@megashadow2:/usr/obj/usr/src/sys/DOIPSEC amd64 cryptotest w/

Re: rc settings for ipv6 in 9.3?

2015-07-01 Thread Kevin Oberman
On Wed, Jul 1, 2015 at 8:17 AM, wrote: > On Tue, Jun 30, 2015 at 09:40:46PM -0700, Kevin Oberman wrote: > >On Tue, Jun 30, 2015 at 5:29 PM, <[1]kpn...@pobox.com> wrote: > > > > I just got a /56 block of ipv6 addresses today and I'm trying to > > figure > > out how to use it. >

[Bug 199174] em tx and rx hang

2015-07-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=199174 --- Comment #22 from david.kel...@litchis.fr --- (In reply to Sean Bruno from comment #21) Sure, I'running now a releng 10.1 kernel with dev/e1000/ from r28. -- You are receiving this mail because: You are the assignee for the bug. ___

[Bug 200210] adding vtnet to bridge results to kernel panic

2015-07-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200210 --- Comment #2 from commit-h...@freebsd.org --- A commit references this bug: Author: kp Date: Wed Jul 1 21:21:15 UTC 2015 New revision: 285016 URL: https://svnweb.freebsd.org/changeset/base/285016 Log: MFC r284348: Fix panic when addin

Re: [Bug 200210] adding vtnet to bridge results to kernel panic

2015-07-01 Thread Kristof Provost
Done in r285016. Regards, Kristof > On 01 Jul 2015, at 18:11, Nikos Vassiliadis wrote: > > Hi Kristof, > > Thanks for fixing this! Could you MFC the fix? > > On 06/13/15 22:39, bugzilla-nore...@freebsd.org wrote: >> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200210 >> >> --- Comment #

Re: Sequence number handling issue with TCP data and FIN flag with a transient error

2015-07-01 Thread hiren panchasara
Created https://reviews.freebsd.org/D2970 to get faster closure on this issue. Cheers, Hiren ps: To comment, you need to sign up for an account. :-( I am not a fan of the whole thing but people seem to respond faster on reviews.freebsd.org so I went with it. pgpYf6BdgHz3N.pgp Description: PGP

[Bug 175864] [re] Intel MB D510MO, onboard ethernet not working after update to 9.1 [regression]

2015-07-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=175864 Sean Bruno changed: What|Removed |Added CC||sbr...@freebsd.org,

Re: [Bug 200210] adding vtnet to bridge results to kernel panic

2015-07-01 Thread Nikos Vassiliadis
Hi Kristof, Thanks for fixing this! Could you MFC the fix? On 06/13/15 22:39, bugzilla-nore...@freebsd.org wrote: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=200210 --- Comment #1 from commit-h...@freebsd.org --- A commit references this bug: Author: kp Date: Sat Jun 13 19:39:22 UTC 201

Re: IPFW divert and suricata

2015-07-01 Thread Oliver Humpage
On 1 Jul 2015, at 15:31, Luigi Rizzo wrote: > For the latter two, you might be better off using netmap > on vmxnet3 (in emulated mode, also disabling offloads), > and if i remember well a couple of years ago there were > efforts to use ​suricata on top of netmap. > Worst case, you can just use t

[Bug 170267] [ixgbe] IXGBE_LE32_TO_CPUS is probably an unintentional no-op

2015-07-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=170267 Sean Bruno changed: What|Removed |Added Assignee|freebsd-net@FreeBSD.org |e...@freebsd.org --- Comment #2 from

[Bug 150249] [ixgbe] Media type detection broken

2015-07-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=150249 Sean Bruno changed: What|Removed |Added Assignee|freebsd-net@FreeBSD.org |e...@freebsd.org --- Comment #2 from

Re: IPFW divert and suricata

2015-07-01 Thread Luigi Rizzo
On Wed, Jul 1, 2015 at 3:15 PM, Oliver Humpage wrote: > > Hello, > > I hope this is a good list to post this on, I have a feeling the solution > is somewhere obscure in the networking layer. > > I've set up an IPS system, using: > > * FreeBSD 10.1 (guest OS, plenty of RAM/CPU) > * ESXi 5.5 (host

[Bug 162153] [em] intel em driver 7.2.4 don't compile

2015-07-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=162153 Sean Bruno changed: What|Removed |Added Resolution|--- |FIXED Status|In Progress

[Bug 199174] em tx and rx hang

2015-07-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=199174 Sean Bruno changed: What|Removed |Added Status|New |In Progress --- Comment #21 from Sean

Re: Same NIC name to MAC mapping on FreeBSD

2015-07-01 Thread Warren Block
Gary Palmer gpalmer at freebsd.org wrote: On Wed, Jul 01, 2015 at 11:42:43AM +0800, Julian Elischer wrote: > I vaguely remember being able to do this some years ago but I can't > remember the details. I believe they do, yes. In fact I seem to remember a discussion on this in the last year and

IPFW divert and suricata

2015-07-01 Thread Oliver Humpage
Hello, I hope this is a good list to post this on, I have a feeling the solution is somewhere obscure in the networking layer. I've set up an IPS system, using: * FreeBSD 10.1 (guest OS, plenty of RAM/CPU) * ESXi 5.5 (host OS, using Intel X520 10Gb cards. Not overloaded, all graphs show it's

Re: Same NIC name to MAC mapping on FreeBSD

2015-07-01 Thread Gary Palmer
On Wed, Jul 01, 2015 at 11:42:43AM +0800, Julian Elischer wrote: > On 7/1/15 6:56 AM, Adrian Chadd wrote: > > Hi, > > > > If we don't support this as part of the interface renaming stuff, it > > would certainly be good to. > > > > > > a- > > > > > > On 29 June 2015 at 21:36, Wei Hu wrote: > >>> --

Re: rc settings for ipv6 in 9.3?

2015-07-01 Thread Willem Jan Withagen
On 01/07/2015 06:40, Kevin Oberman wrote: > On Tue, Jun 30, 2015 at 5:29 PM, wrote: > >> I just got a /56 block of ipv6 addresses today and I'm trying to figure >> out how to use it. >> >> Before I go rebooting my server I wanted to ask if the information in the >> handbook "https://www.freebsd.o

Re: Same NIC name to MAC mapping on FreeBSD

2015-07-01 Thread Willem Jan Withagen
On 01/07/2015 05:42, Julian Elischer wrote: > On 7/1/15 6:56 AM, Adrian Chadd wrote: >> Hi, >> >> If we don't support this as part of the interface renaming stuff, it >> would certainly be good to. >> >> >> a- >> >> >> On 29 June 2015 at 21:36, Wei Hu wrote: -Original Message- Fr

[Bug 199174] em tx and rx hang

2015-07-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=199174 --- Comment #20 from david.kel...@litchis.fr --- (In reply to Sean Bruno from comment #19) 10.1-RELEASE-p10 -- You are receiving this mail because: You are the assignee for the bug. ___ freebsd-n