Re: Several IPv6 routers and default gateway choice

2019-08-29 Thread Hiroki Sato
Victor Sudakov wrote in <20190830021228.ga66...@admin.sibptus.ru>: va> Dear Colleagues, va> va> If a FreeBSD host receives router advertisements from several IPv6 va> routers, on a LAN segment, which would be chosen as the default gateway? One reachable router will be selected based on the de

Several IPv6 routers and default gateway choice

2019-08-29 Thread Victor Sudakov
Dear Colleagues, If a FreeBSD host receives router advertisements from several IPv6 routers, on a LAN segment, which would be chosen as the default gateway? Can this be used for failover? -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN 2:5005/49@fidonet http://vas.tomsk.ru/ signature.asc Descriptio

Re: finding optimal ipfw strategy

2019-08-29 Thread Eugene Grosbein
30.08.2019 1:39, Rodney W. Grimes wrote: > One of the things I do when writting a firewall is very early break > up the traffic based on which interface(s) it is coming in/out of > and do a skipto based on that, then further classify based on layers > so that I am usually only doing 1 compare as i

Re: finding optimal ipfw strategy

2019-08-29 Thread Rodney W. Grimes
> 28.08.2019 23:58, Victor Gamov wrote: > > > P.S. Two questions about rules syntax optimization. What is more effective: > > skipto tablearg udp from any to table(AllMcast_out) > > or > > skipto tablearg udp from any to table(AllMcast_out) out xmit vlan* > > Can't tell, this heavily depends o

Re: how to down interface at startup

2019-08-29 Thread Victor Gamov
When I configure vlans like this = cloned_interfaces="${cloned_interfaces} vlan221" ifconfig_vlan221="inet 10.2.2.241/28 vlan 221 vlandev igb0 NOAUTO" = then NOAUTO clause has no effect Small patch to allow NOAUTO for any interface: ===cut here=== *** /etc/network.subr.orig Tue Au

10 Gbps NIC - advice needed

2019-08-29 Thread Robert Heron
Hi, I need to use a 10 Gbps, 2 port NIC (copper RJ-45) with FreeBSD 11.3R amd64. Which NIC (manufacturer and model) would you recommend as the most trouble-free and reliable? Maybe some Intel? Robert ___ freebsd-net@freebsd.org mailing list https:/

problem with carp on 11.3-RELEASE

2019-08-29 Thread Patrick Lamaiziere
Hello, I've upgraded our two firewalls from 11.2-RELEASE-p11 to 11.3 release p3 and I'm seeing a problem with carp, the carp slave becomes briefly MASTER and returns to the slave state. This occurs often. the firewalls use PF / PFSYNC / CARP and the configuration is the same as on 11.2. On 11.2 t