Re: [RFC/RFT] projects/ipsec

2016-12-27 Thread Ermal Luçi
On Tue, Dec 27, 2016 at 6:10 AM, Andrey V. Elsukov wrote: > On 27.12.2016 16:15, Jim Thompson wrote: > >> In it's initial state if_ipsec allows to use only one set of >>> encryption parameters (because only one sainfo anonyumous is >>> possible), so at this time it doesn't allow to create multipl

[Bug 193579] [axge] axge driver issue with tcp checksum offload with pf nat

2016-12-27 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=193579 Hiren Panchasara changed: What|Removed |Added Status|In Progress |Closed CC|

[Bug 151937] [patch] netstat(1) utility lack support of displaying rtt related counters of tcp sockets

2016-12-27 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=151937 Hiren Panchasara changed: What|Removed |Added Assignee|freebsd-b...@freebsd.org|freebsd-net@FreeBSD.org --- Com

[Bug 125845] [netinet] [patch] tcp_lro_rx() should make use of hardware IP cksum assistance when available

2016-12-27 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=125845 Hiren Panchasara changed: What|Removed |Added CC||hi...@freebsd.org,

[Bug 96268] [socket] TCP socket performance drops by 3000% if packets are split at the first byte

2016-12-27 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=96268 Hiren Panchasara changed: What|Removed |Added Resolution|--- |Overcome By Events

[Bug 24959] [patch] proper TCP_NOPUSH/TCP_CORK compatibility

2016-12-27 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=24959 Hiren Panchasara changed: What|Removed |Added CC||hi...@freebsd.org Resolu

[Bug 212283] oversized IP datagrams on raw socket with IP_RAWOUTPUT hang network interface drivers

2016-12-27 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=212283 Andrey V. Elsukov changed: What|Removed |Added Assignee|freebsd-net@FreeBSD.org |a...@freebsd.org -- You are r

[SOLVED] IPSec tunnel, VNET jail and routing issue

2016-12-27 Thread Michael Grimm
Michael Grimm wrote: Nevermind, I solved my issue. I has been a minor typo with major consequences. > Configuration (shown for hostA, only): > > setkey.conf > # hostA hostB > hostA hostB > spdadd 10.1.1.0/

Re: [RFC/RFT] projects/ipsec

2016-12-27 Thread Andrey V. Elsukov
On 27.12.2016 16:15, Jim Thompson wrote: In it's initial state if_ipsec allows to use only one set of encryption parameters (because only one sainfo anonyumous is possible), so at this time it doesn't allow to create multiple tunnels with VPN hubs that use different cipers and/or transform sets,

Re: [RFC/RFT] projects/ipsec

2016-12-27 Thread Jim Thompson
> In it's initial state if_ipsec allows to use only one set of encryption > parameters (because only one sainfo anonyumous is possible), so at this time > it doesn't allow to create multiple tunnels with VPN hubs that use different > cipers and/or transform sets, but as far as I understand this

Re: [RFC/RFT] projects/ipsec

2016-12-27 Thread Andrey V. Elsukov
On 11.12.2016 02:07, Andrey V. Elsukov wrote: Hi All, I am pleased to announce that projects/ipsec, that I started several months ago is ready for testing and review. The main goals were: * rework locking to make IPsec code more friendly for concurrent processing; * make lookup in SADB/S

[Bug 206185] [netgraph][patch] refactoring ng_patch

2016-12-27 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=206185 --- Comment #5 from commit-h...@freebsd.org --- A commit references this bug: Author: julian Date: Tue Dec 27 08:31:41 UTC 2016 New revision: 310625 URL: https://svnweb.freebsd.org/changeset/base/310625 Log: MFH: r309408 Changes to al