Re: vlan+bridge questions

2015-08-14 Thread John Nielsen
> On Aug 14, 2015, at 11:57 AM, Hooshang F wrote: > > We need to install a freebsd firewall (pf). The freebsd > box needs to be placed in bridge mode in the middle of a VLAN truck > link between 2 Cisco switches. The em0 and em1 ports > are connected to the trunk ports on the 2 switches. > > We

Re: Ethernet tunneling options under FreeBSD

2015-08-14 Thread James Lott
n2n honestly looks wonderful, but it also appears to be dead... I'm trying to stay as close to the OS layer as possible with my options, so I would prefer to limit the role of comprehensive software like OpenVPN or what ZeroTierOne appears to be. I actually found this interesting github project

Re: Ethernet tunneling options under FreeBSD

2015-08-14 Thread Outback Dingo
On Sat, Aug 15, 2015 at 12:40 PM, James Lott wrote: > > you haven't really described the network well enough.. > > try an ascii-art diagram (don't forget to set fixed width font :-) > > a VPN required two ends.. one is FreeBSD... what's the other? > > The thing is, the "other" could be any number

Re: Ethernet tunneling options under FreeBSD

2015-08-14 Thread James Lott
> you haven't really described the network well enough.. > try an ascii-art diagram (don't forget to set fixed width font :-) > a VPN required two ends.. one is FreeBSD... what's the other? The thing is, the "other" could be any number of operating systems. I'm looking for a tunneling protocol wi

Re: RE not working on 10.2-RELEASE #0 r286731M

2015-08-14 Thread Kim Culhan
> -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > On 08/14/15 13:34, Kim Culhan wrote: >> RE on 10.2-RELEASE #0 r286731M appears to pass only arp traffic. >> >> Replaced if_re.c with version from 273757, appears to work >> normally. >> >> The diff: >> >> 34c34 < __FBSDID("$FreeBSD: stable/10/

Re: RE not working on 10.2-RELEASE #0 r286731M

2015-08-14 Thread Sean Bruno
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 08/14/15 13:34, Kim Culhan wrote: > RE on 10.2-RELEASE #0 r286731M appears to pass only arp traffic. > > Replaced if_re.c with version from 273757, appears to work > normally. > > The diff: > > 34c34 < __FBSDID("$FreeBSD: stable/10/sys/dev/re/i

RE not working on 10.2-RELEASE #0 r286731M

2015-08-14 Thread Kim Culhan
RE on 10.2-RELEASE #0 r286731M appears to pass only arp traffic. Replaced if_re.c with version from 273757, appears to work normally. The diff: 34c34 < __FBSDID("$FreeBSD: stable/10/sys/dev/re/if_re.c 273757 2014-10-28 00:43:00Z yongari $"); --- > __FBSDID("$FreeBSD: releng/10.2/sys/dev/re/if_re

vlan+bridge questions

2015-08-14 Thread Hooshang F
Hi, We need to install a freebsd firewall (pf). The freebsd box needs to be placed in bridge mode in the middle of a VLAN truck link between 2 Cisco switches. The em0 and em1 ports are connected to the trunk ports on the 2 switches. We are going to: 1- Define two vlan interfaces for vlan id X.

Re: Poor high-PPS performance of the 10G ixgbe(9) NIC/driver in FreeBSD 10.1

2015-08-14 Thread Maxim Sobolev
P.S. Just for the comparison, here is today's stats from the system mentioned here with the low-end I210 chip (4 hardware queues), running happily at some 240Kpps. The system and software is identical otherwise and the igb(9) settings are the default ones: http://sobomax.sippysoft.com/ScreenShot39

Re: Poor high-PPS performance of the 10G ixgbe(9) NIC/driver in FreeBSD 10.1

2015-08-14 Thread Maxim Sobolev
Hi guys, unfortunately no, neither reduction of the number of queues from 8 to 6 nor pinning interrupt rate at 2 per queue have not made any difference. The card still goes kaboom at about 200Kpps no matter what. in fact I've gone bit further, and after the first spike went on an pushed interru

Re: Ethernet tunneling options under FreeBSD

2015-08-14 Thread Julian Elischer
On 8/14/15 6:40 AM, James Lott wrote: Hello list, I am in the process of planning a build out of a L2 VPN, in which I'd like to have my primary "switch" and DHCP server be a FreeBSD system. I would like to join each new host to the VPN by establishing an IP tunnel with the primary "switch" wh