Re: How to tell if a network interface was renamed (and from what)

2023-11-19 Thread Özkan KIRIK
Hi Mina, Let's explain with a small example: In this scenario, we are going to add two alternate names for the "lo" interface. And then we can access to the interface using all of the names: lo, test1, test2 # ip link show lo 1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group defaul

Re: How to tell if a network interface was renamed (and from what)

2023-11-19 Thread Özkan KIRIK
It would be better if FreeBSD could have "interface altname feature" like Linux has. Kyle Evans , 19 Kas 2023 Paz, 07:50 tarihinde şunu yazdı: > > On 11/18/23 19:15, Zhenlei Huang wrote: > > > > > >> On Nov 19, 2023, at 6:20 AM, Mina Galić >> > wrote: > >> > >> Hi folks,

IPsec VTI for Roadwarriors. reqid doesn't working for instantiating CHILD_SAs more than once.

2023-04-09 Thread Özkan KIRIK
Hi, I'm using FreeBSD stable/13 and strongSwan 5.9. I have configured my server as IPsec responder. Variadic number of roadwarriors are connecting to this IPsec server. So both Phase1 and Phase2 connections are instantiating. IPsec connections could be established without any errors. Each roadwarr

Re: Bridging LACP PDUs ?

2022-11-10 Thread Özkan KIRIK
Thanks for the tip! Lutz Donnerhacke , 10 Kas 2022 Per, 17:13 tarihinde şunu yazdı: > > On Thu, Nov 10, 2022 at 04:28:50PM +0300, Özkan KIRIK wrote: > > I'm trying to filter traffic through an uplink cable between two > > switches. (similar to virtual wire behaviour

Re: Bridging LACP PDUs ?

2022-11-10 Thread Özkan KIRIK
eebsd-src/blob/main/sys/net/if_bridge.c#L2369-L2372 I've defined a new sysctl to turn on/off this condition. It's working now as I expect. Thanks, Lutz Donnerhacke , 10 Kas 2022 Per, 16:12 tarihinde şunu yazdı: > > On Tue, Nov 08, 2022 at 04:44:38PM +0300, Özkan KIRIK wrote: > &g

Bridging LACP PDUs ?

2022-11-08 Thread Özkan KIRIK
Hello, I'm using the stable/13 branch. I'm trying to bridge LACP PDU packets through if_bridge. But the bridge0 interface not forwarding the LACP PDU packets. pf and ipfw is disabled. I've tried setting sysctl net.link.bridge.pfil_onlyip=0 also. Topology is below: [switch1 - lacp] <---> [ freebsd

Re: how to bridge "native" vlan?

2022-04-23 Thread Özkan KIRIK
nhwfilter" feature of NIC. ifconfig em0 promisc up ifconfig em1 promisc up ifconfig bridge0 create ifconfig bridge0 addm em0 addm em1 up thats all Regards, Özkan KIRIK ePati Cyber Security Benoit Chesneau , 23 Nis 2022 Cmt, 11:13 tarihinde şunu yazdı: > > I've found this old ticke

Is there any work for if_macsec IEEE 802.1AE - MACsec support for FreeBSD ?

2022-03-26 Thread Özkan KIRIK
Hello Everybody, I wonder if there is any work or plan for if_macsec IEEE 802.1AE - MACsec support for FreeBSD ? Linux has if_macsec support. Regards, Ozkan

DHCP Server over IPsec (may be IPsec and raw sockets issue)

2022-02-28 Thread Özkan KIRIK
Hello, I'm running FreeBSD stable/12. I'm running kea-dhcp server and strongswan. DHCP Relay packets are received over IPsec, but kea-dhcp couldn't receive packets while in "raw" socket mode. When the kea-dhcp is configured to "udp" sockets, DHCP Relay packets can be received. As you know, when dh

iflib queue - nic queue assignment list

2021-12-17 Thread Özkan KIRIK
Hello, I'm using freebsd stable/12. top shows the iflib queues as below: 0 root-92- 0B 3872K CPU18 18 199.1H 100.00% [kernel{if_io_tqg_18}] 0 root-92- 0B 3872K CPU22 22 228.4H 97.95% [kernel{if_io_tqg_22}] 0 root-92- 0B 3872K CPU1

Re: if_vlan allow to set incorrect mtu

2021-12-07 Thread Özkan KIRIK
Please see the https://reviews.freebsd.org/D33154, igb driver doesn't honor the interface capabilities like vlanhwtag, vlan* and etc now. If you want, you can apply the patches from D33154 Regards, Özkan KIRIK On Tue, Dec 7, 2021 at 12:06 PM Marek Zarychta wrote: > > W dniu 7.12.2

e1000 & igb if_vlan netmap header stripping issue after e1000-igb driver updates.

2021-11-20 Thread Özkan KIRIK
h problem on ix and ixl cards. Is it possible to check and fix? Best Regards, Özkan KIRIK

Re: Iterating all VNETs from userspace application

2021-10-18 Thread Özkan KIRIK
I'll have a look On Mon, Oct 18, 2021 at 11:07 AM Özkan KIRIK wrote: > > Thank you Bjoern, I'll have al > > On Mon, Oct 18, 2021 at 10:49 AM Bjoern A. Zeeb > wrote: > > > > On 18 Oct 2021, at 4:46, Özkan KIRIK wrote: > > > > > Hi, > &g

Re: Iterating all VNETs from userspace application

2021-10-18 Thread Özkan KIRIK
Thank you Bjoern, I'll have al On Mon, Oct 18, 2021 at 10:49 AM Bjoern A. Zeeb wrote: > > On 18 Oct 2021, at 4:46, Özkan KIRIK wrote: > > > Hi, > > > > I'm trying to gather all even within jails/vnet interface stats which > > interface type ifmd_data.if

Iterating all VNETs from userspace application

2021-10-17 Thread Özkan KIRIK
Hi, I'm trying to gather all even within jails/vnet interface stats which interface type ifmd_data.ifi_type == IFT_ETHER (6) for bsnmpd. Related function (not modified) is here: https://github.com/freebsd/freebsd-src/blob/main/contrib/bsnmp/snmp_mibII/mibII.c#L926-L985 It's possible to add a fil

Re: bsnmpd how to monitor only selected interfaces and jail-vnet interfaces

2021-10-16 Thread Özkan KIRIK
and the ARP table. > > harti > > -Original Message- > From: owner-freebsd-...@freebsd.org On Behalf > Of Özkan KIRIK > Sent: Sunday, October 10, 2021 7:00 AM > To: FreeBSD Net > Subject: bsnmpd how to monitor only selected interfaces and jail-vnet > interfaces &

bsnmpd how to monitor only selected interfaces and jail-vnet interfaces

2021-10-09 Thread Özkan KIRIK
Hello, I have a system that have too many (over 500 vlans) cloned interfaces and two jails. Jails are using vnet and they have their own physical interfaces. Host Interfaces: - em0 - WAN - em1 - LAN - em1.10 em1.550 (vlan interface) - em2 - LAN2 Jail1 Interfaces: - em3 Jail2 Interfaces: -

Creating/destroying bulk VLAN interfaces takes too long

2021-08-30 Thread Özkan KIRIK
Hello, I'm using FreeBSD stable/12. Creating/destroying bulk vlan interfaces takes too long to finish. Running parallel doesn't matter. Is there any fast way to create 100 vlan interfaces? seq 1 100 | /usr/bin/time xargs -t -n 1 -I % ifconfig em1.% create ... ifconfig em1.99 create ifconfig em1.1

Re: Wired Memory Increasing about 500MBytes per day

2021-08-03 Thread Özkan KIRIK
21 at 9:38 AM Andrey V. Elsukov wrote: > 02.08.2021 08:00, Özkan KIRIK пишет: > > Hello, > > > > I'm using FreeBSD stable/12 0f97f2a1857a96563792f0d873b11a16ff9f818c (Jul > > 25) built. > > pf, ipfw and ipsec options are built with kernel. The server is

Wired Memory Increasing about 500MBytes per day

2021-08-01 Thread Özkan KIRIK
Hello, I'm using FreeBSD stable/12 0f97f2a1857a96563792f0d873b11a16ff9f818c (Jul 25) built. pf, ipfw and ipsec options are built with kernel. The server is used as firewall that squid and snort3 (daq - netmap) is running. I saw that, wired memory is increasing every day. It's about 500MBytes per

Re: IPsec performace - netisr hits %100

2021-05-06 Thread Özkan KIRIK
I wonder that if you received the flame graphs ? I also tested system with multiple if_ipsec interfaces using different source-dst tunnel address. By this way, system can utilize all cpu cores. But for single if_ipsec interface, is there a way to speed up transfer ? Thanks! On Mon, May 3, 2021 a

Re: IPsec performace - netisr hits %100

2021-05-02 Thread Özkan KIRIK
dev.qat.0.%location: slot=0 function=0 dbsf=pci0:181:0:0 dev.qat.0.%driver: qat dev.qat.0.%desc: Intel C620/Xeon D-2100 QuickAssist PF dev.qat.%parent: On Sat, May 1, 2021 at 5:51 PM Mark Johnston wrote: > On Sat, May 01, 2021 at 04:30:59PM +0300, Özkan KIRIK wrote: > > This bug is relat

Re: IPsec performace - netisr hits %100

2021-05-01 Thread Özkan KIRIK
the previous flamegraph is captured while iperf client (jail) sends to iperf server. the attached flamegraph to this mail is captured while iperf configured full-duplex mode. Throughput is about up: 1.5 Gbps down: 1.5 Gbps total: 3 Gbps On Sat, May 1, 2021 at 11:57 PM Özkan KIRIK wrote

Re: IPsec performace - netisr hits %100

2021-05-01 Thread Özkan KIRIK
fast. There is something makes bottleneck for IPsec. On Sat, May 1, 2021 at 3:39 PM Özkan KIRIK wrote: > I've pulled the latest stable/13 branch and make buildworld. > > Same configuration and same usage, ping works between two sides, iperf can > connect to server but no data transf

Re: IPsec performace - netisr hits %100

2021-05-01 Thread Özkan KIRIK
= 0 (0x0) _umtx_op(0x800290d80,UMTX_OP_RW_WRLOCK,0x0,0x0,0x0) = 0 (0x0) _umtx_op(0x800290d80,UMTX_OP_RW_UNLOCK,0x0,0x0,0x0) = 0 (0x0) _umtx_op(0x800290d80,UMTX_OP_RW_RDLOCK,0x0,0x0,0x0) = 0 (0x0) _umtx_op(0x800290d80,UMTX_OP_RW_WRLOCK,0x0,0x0,0x0) = 0 (0x0) _umtx_op(0x800290d80,UMTX_OP_RW_UNLOCK,0x0,0x0,0x0)

Re: IPsec performace - netisr hits %100

2021-04-30 Thread Özkan KIRIK
- 0B 1664K WAIT 6 0:00 1.03% [intr{irq366: qat1}] On Sat, May 1, 2021 at 12:45 AM Mark Johnston wrote: > On Sat, May 01, 2021 at 12:31:57AM +0300, Özkan KIRIK wrote: > > Hello again, > > > > patch is applied, now netisr is not eating CPU. but performance dro

Re: IPsec performace - netisr hits %100

2021-04-30 Thread Özkan KIRIK
23M 4348K sbwait 12 0:00 3.88% iperf -B 172.16.70.1 -c 172.16.68.1 -P 2 -t 20{iperf} 6124 root 22023M 4348K sbwait 4 0:00 3.63% iperf -B 172.16.70.8 -c 172.16.68.1 -P 2 -t 20{iperf} On Fri, Apr 30, 2021 at 11:40 PM Özkan KIRIK wrote: > Thank you Mark, >

Re: IPsec performace - netisr hits %100

2021-04-30 Thread Özkan KIRIK
11:48PM +0300, Özkan KIRIK wrote: > > Hello, > > > > I'm using FreeBSD stable/12 built world on 12 April 2021. > > my setup is: > > [freebsd host cc0] <> [cc1 - same freebsd, but jail] > > > > without IPsec, I can achieve easily to 20Gbps.

IPsec performace - netisr hits %100

2021-04-30 Thread Özkan KIRIK
Hello, I'm using FreeBSD stable/12 built world on 12 April 2021. my setup is: [freebsd host cc0] <> [cc1 - same freebsd, but jail] without IPsec, I can achieve easily to 20Gbps. (test was run with different source IPs using multiple iperf to scale across multiple queues) My hardware is Xe

Chelsio T62100 - t6nex0: encountered fatal error, adapter stopped.

2021-04-29 Thread Özkan KIRIK
Hello, I'm using, FreeBSD stable/12-n232956-5fb6cfadcd9d-dirty: Mon Apr 12 09:03:59 +03 2021 . I'm trying to run iperf between two hosts that each one has Chelsio T62100-LP-CR card. There two host is connected with AOC cable. ifconfig output of one host is below: cc0: flags=8843 metric 0 mtu 15

Re: jail - vnet bug - ping: UDP connect: No route to host

2021-04-27 Thread Özkan KIRIK
Hello Michael, Sorry for late reply. It works after starting ip6addrctl service. Thank you. On Mon, Apr 12, 2021 at 10:20 PM Michael Gmelin wrote: > > > On Mon, 12 Apr 2021 19:57:40 +0200 > Michael Gmelin wrote: > > > On Mon, 12 Apr 2021 17:45:36 +0300 > > Özkan K

Chelsio T62100 - CCR : Device not configured

2021-04-26 Thread Özkan KIRIK
Hello, I'have a Chelsio T62100-LP-CR card. I want to use IPsec acceleration. I'm using FreeBSD stable/12 (built on 2021-04-12). But when using setkey, I got "Device not configured" error. What is the right way to use it ? I'm using both if_ipsec and strongswan. How to repeat: # kldload ccr # dm

Re: jail - vnet bug - ping: UDP connect: No route to host

2021-04-12 Thread Özkan KIRIK
" host.hostuuid=---- On Mon, Apr 12, 2021 at 3:39 PM Michael Gmelin wrote: > > > On Mon, 12 Apr 2021 15:28:16 +0300 > Özkan KIRIK wrote: > > > Hello > > > > the output is below: > > > > root@f13:~ # cat /etc/resolv.conf

Re: jail - vnet bug - ping: UDP connect: No route to host

2021-04-12 Thread Özkan KIRIK
AF_INET6 [2a00:1450:4006:802::2004]:10101 },28) ERR#65 'No route to host' ping: write(2,"ping: ",6) = 6 (0x6) UDP connectwrite(2,"UDP connect",11) = 11 (0xb) : write(2,": ",2) = 2 (0x2) fstatat(AT_FDCWD,"/usr/share/nls/C/libc.cat",0x7fffb7f0,0x0) ERR

jail - vnet bug - ping: UDP connect: No route to host

2021-04-10 Thread Özkan KIRIK
Hello, There is something wrong about routing lookup on vnet-jails. Although my jail doesn't have IPv6 address, it tries to use IPv6 by default and get "ping: UDP connect: No route to host" error. But it works by forcing to use IPv4. The problem is reproducable. This is a fresh insallation of Fre

Re: ixl netmap TX queue remains full

2021-03-29 Thread Özkan KIRIK
gt; https://reviews.freebsd.org/D26896? > > Moreover, what happens if you switch the enable_head_writeback sysctl? > > Cheers, > Vincenzo > > Il giorno lun 29 mar 2021 alle ore 10:36 Özkan KIRIK < > ozkan.ki...@gmail.com> ha scritto: > >> Hello, >> >&

ixl netmap TX queue remains full

2021-03-29 Thread Özkan KIRIK
Hello, I hit problems about ixl driver's netmap support. I have no problems with ixgbe. The problem is tested with FreeBSD 12.2-p5 and FreeBSD 13.0-RC3. ixl in netmap mode, it works with low throughput (about 2 Gbps) for 20-30 seconds. And then TX queue remains full. poll with POLLOUT and even io

Re: RSS on FreeBSD stable/12 gateway

2021-03-13 Thread Özkan KIRIK
ght way to do this? Özkan On Sun, Mar 14, 2021 at 7:02 AM Adrian Chadd wrote: > On Sun, 7 Mar 2021 at 23:08, Özkan KIRIK wrote: > > > > Thanks, > > > > I wonder that, why RSS and PCBGROUP options are not enabled in GENERIC > > kernel by default. > > Is ther

Re: RSS on FreeBSD stable/12 gateway

2021-03-07 Thread Özkan KIRIK
Thanks, I wonder that, why RSS and PCBGROUP options are not enabled in GENERIC kernel by default. Is there any performance or stability issues? On Mon, Mar 8, 2021 at 12:26 AM Hans Petter Selasky wrote: > On 3/7/21 10:03 PM, Özkan KIRIK wrote: > > Any suggestions to enable RSS ? &g

RSS on FreeBSD stable/12 gateway

2021-03-07 Thread Özkan KIRIK
Hello, I'm using FreeBSD stable/12 as firewall. I think RSS is not working properly. Multiple snort processes are running that one process for each NIC queue. I've igb and ixgbe NICs. When number of NIC queues is 8, snort appid detection not working properly. When number of NIC queues is set to 1,

Re: wireguard if_wg manual page is missing? How to use?

2021-01-25 Thread Özkan KIRIK
/pipermail/freebsd-net/2021-January/057385.html > Do not forget to patch the kernel, otherwise it will not work. > > вт, 26 янв. 2021 г. в 09:12, Özkan KIRIK : > > > > Hello, > > > > I'm running FreeBSD 13-ALPHA2 amd64. > > But no such manual page was

wireguard if_wg manual page is missing? How to use?

2021-01-25 Thread Özkan KIRIK
Hello, I'm running FreeBSD 13-ALPHA2 amd64. But no such manual page was found: if_wg or wg. Is it possible to share how to use and how to debug connection status of if_wg kernel module? Thanks ___ freebsd-net@freebsd.org mailing list https://lists.freeb

Re: How change RSS Hash function for igb ?

2020-09-13 Thread Özkan KIRIK
Thank you. On Sun, Sep 13, 2020 at 6:25 PM Eugene Grosbein wrote: > 13.09.2020 12:28, Özkan KIRIK wrote: > > > I'm using FreeBSD stable/12. Is it possible ? > > > > On Fri, Aug 28, 2020 at 10:56 PM Özkan KIRIK > wrote: > > > >> Hi, > >>

Re: How change RSS Hash function for igb ?

2020-09-12 Thread Özkan KIRIK
I'm using FreeBSD stable/12. Is it possible ? On Fri, Aug 28, 2020 at 10:56 PM Özkan KIRIK wrote: > Hi, > > I need to change RSS Hash function to 2-tuple for igb driver. > How can I do it ? > I didn't see any sysctl. > If there is any way even by modifying driver cod

How change RSS Hash function for igb ?

2020-08-28 Thread Özkan KIRIK
Hi, I need to change RSS Hash function to 2-tuple for igb driver. How can I do it ? I didn't see any sysctl. If there is any way even by modifying driver code I want to try. Regards ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mail

stable/12 - netstat -g IPv4 Virtual Interface Table data wrong

2020-05-22 Thread Özkan KIRIK
Hello, I opened 2 bug reports about FreeBSD stable/12. (https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=246626 and https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=246626) I'm not runnging any daemons on system. No multicast software or router running. But netstat output is scrambled. I chec

How to force Multicast VIF disable

2020-05-21 Thread Özkan KIRIK
Hello, I'm using FreeBSD 12.1-STABLE. After restarting multicast routing daemon, daemon can't start with this error: "Failed adding VIF 1 (MRT_ADD_VIF) for iface em1: Address already in use". pimd tries to disable all vifs from kernel (shown in output below) but still throws same error. I tried w

Re: dummynet performance

2020-04-09 Thread Özkan KIRIK
Thanks! On Thu, Apr 9, 2020 at 8:29 PM Luigi Rizzo wrote: > On Thu, Apr 9, 2020 at 2:18 AM Özkan KIRIK wrote: > > > > Hello, > > > > I wonder if it is possible to update dummynet code multi-threading > capable > > practically? > > My idea is below: >

Re: dummynet performance

2020-04-09 Thread Özkan KIRIK
and it should call the right schedulers enqueue function that runs different thread? cheers Ozkan On Thu, Apr 9, 2020 at 12:43 PM Luigi Rizzo wrote: > On Thu, Apr 9, 2020 at 2:18 AM Özkan KIRIK wrote: > > > > Hello, > > > > I wonder if it is possible to updat

dummynet performance

2020-04-09 Thread Özkan KIRIK
Hello, I wonder if it is possible to update dummynet code multi-threading capable practically? My idea is below: - A new sysctl tunable will be defined as "net.inet.ip.dummynet.thread_count" (default 1) - To distribute tasks along threads, each sched instance can be assigned to different thread. -

Re: pf (rules and nat) + (ipfw + dummynet)

2020-01-25 Thread Özkan KIRIK
Hello Andrey, Have you started to rewrite dummynet? If yes, I can test and give feedbacks in different scenarios. Regards On Mon, Aug 19, 2019 at 12:53 PM Andrey V. Elsukov wrote: > On 18.08.2019 00:25, Andrew White wrote: > > I also see some work underway to separate dummynet from ipfw, is t

Re: if_epair altq support problem

2017-03-24 Thread Özkan KIRIK
Hi again, This patch works perfectly also. Thank you so much. Is it possible to commit this patch to repo? On Thu, Mar 23, 2017 at 10:57 PM, Ermal Luçi wrote: > > > On Thu, Mar 23, 2017 at 12:16 PM, Özkan KIRIK > wrote: > >> Ermal thank you again, >> It compiles bu

Re: if_epair altq support problem

2017-03-23 Thread Özkan KIRIK
Ermal thank you again, It compiles but pf still says that "pfctl: epair0b: driver does not support altq" :/ On Thu, Mar 23, 2017 at 9:46 PM, Ermal Luçi wrote: > > On Thu, Mar 23, 2017 at 11:06 AM, Özkan KIRIK > wrote: > >> Thank you, I'm waiting for 10.3 fix :)

Re: if_epair altq support problem

2017-03-23 Thread Özkan KIRIK
Thank you, I'm waiting for 10.3 fix :) have a nice day On Wed, Mar 22, 2017 at 11:44 PM, Ermal Luçi wrote: > > On Wed, Mar 22, 2017 at 10:50 AM, Özkan KIRIK > wrote: > >> Sorry, I mistested on 10.3RELENG. >> it works on 11 RELENG, But at 10.3RELENG it thro

Re: if_epair altq support problem

2017-03-22 Thread Özkan KIRIK
at 8:18 PM, Özkan KIRIK wrote: > Thank You Ermal ! > > It works perfectly, can you commit this patch to 11.0 RELENG and MFC to > 10.3 RELENG ? > > Regards > > On Wed, Mar 22, 2017 at 6:59 AM, Ermal Luçi wrote: > >> >> >> On Tue, Mar 21, 2017 at 5:26 AM, Ö

Re: if_epair altq support problem

2017-03-22 Thread Özkan KIRIK
Thank You Ermal ! It works perfectly, can you commit this patch to 11.0 RELENG and MFC to 10.3 RELENG ? Regards On Wed, Mar 22, 2017 at 6:59 AM, Ermal Luçi wrote: > > > On Tue, Mar 21, 2017 at 5:26 AM, Özkan KIRIK > wrote: > >> Hello, >> >> I sent this emai

if_epair altq support problem

2017-03-21 Thread Özkan KIRIK
if ((ifp->if_drv_flags & IFF_DRV_OACTIVE) == 0) 528 epair_start_locked(ifp); 529 else 530 (void)epair_add_ifp_for_draining(ifp); 531 } 532 return (error); 533 } 534 IF_UNLOCK(&ifp->if_snd); 535 #endif I have no idea that why it says that it doesn't support altq altough the source code contains ALTQ section. Regards Özkan KIRIK ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: IPFW: table support for MAC addresses?

2016-06-05 Thread Özkan KIRIK
I also need this feature On Fri, Jun 3, 2016 at 4:11 PM, Aleksandr A Babaylov <"."@babolo.ru> wrote: > On Thu, Jun 02, 2016 at 02:18:56PM +0200, Julian K. wrote: > > is there anyone who wants to use MAC based rules with IPFW? > > I want to build a captive portal that also supports IPv6. MAC addre

Re: tutorial on Netmap in Mountain View - Aug.28

2014-08-21 Thread Özkan KIRIK
+1 On Thu, Aug 21, 2014 at 6:23 AM, Kubilay Kocak wrote: > On 18/08/2014 8:29 PM, Carlos Ferreira wrote: > > Hi Luigi. > > Do you have presentations or tutorial code from that tutorial, that you > can > > share here? > > > > > > On 4 August 2014 10:55, Luigi Rizzo wrote: > > > >> In case someo

FreeBSD 10 - ixgbe packet drop

2014-06-04 Thread Özkan KIRIK
Hi I'm using FreeBSD 10. My ix0 is connected to my backbone switch. Traffic is about 90Mbit/s. But after 3 minutes it stops working. ifconfig ix0 down ; ifconfig ix0 up solves problem temprorarily. It's strange that, dev.ix.0.dropped is 0 but, netstat's Idrop counter is growing. How can i debug t

Re: bridge Untagged packets on an interface

2014-05-02 Thread Özkan KIRIK
And also i tried ng_bpf + ng_eiface conjuction, but ng_bpf doesnt match "vlan" filter. With the script below, ng_bpf always calls ifNotMatch hook. When the pattern is "ip", ng_bpf matches frames have both vlan and ip headers. I think ng_bpf doesnt process ethernet header. Is there a way to proc

bridge Untagged packets on an interface

2014-05-02 Thread Özkan KIRIK
Hi, Assume that default vlan untagged and VLAN 10, 20, 30, 40 tagged on switch connected to em0 interface. i am trying to bridge only untagged frames on em0 with em1. Does if_vlan handle untagged frames? # ifconfig em0.0 create ifconfig: SIOCIFCREATE2: Invalid argument Any ideas? Best regards

Re: VLAN switching on freebsd

2014-05-02 Thread Özkan KIRIK
Thank you very much John, This approach is enlightened me. I'll try it. I couldnt think of use ng_vlan in front of ngeth nodes. I used openvswitch for this scenario, but performance is very very poor. I'm looking forward to release of the "in-kernel openvswitch on freebsd" project of Luigi Rizzo

VLAN switching on freebsd

2014-05-02 Thread Özkan KIRIK
Hi, i need to create a virtual interface that forwards only defined vlan tags. Lets talk on a sample scenario : Assume that VLAN 10, 20, 30, 40 tagged on switch connected to em0 interface. create ngeth0 and ngeth1. ( i dont need netgraph interface, it can be a any virtual interface tap .. etc. )

Re: netisr 0 : %100 and other netisr threads are waiting

2014-04-05 Thread Özkan KIRIK
> On Thu, Apr 3, 2014 at 9:54 PM, Özkan KIRIK wrote: > > Hi, > > > > I am trying to use suricata on FreeBSD 10 amd64. > > FreeBSD behaves as a VLAN router and NAT Box. > > > > Traffic is about 400Mbps. > > When i diverted traffic to suricata, swi: netisr

netisr 0 : %100 and other netisr threads are waiting

2014-04-03 Thread Özkan KIRIK
Hi, I am trying to use suricata on FreeBSD 10 amd64. FreeBSD behaves as a VLAN router and NAT Box. Traffic is about 400Mbps. When i diverted traffic to suricata, swi: netisr 0 thread gets %100 cpu. other netisr threads are %0. And Even I remove the divert rule, netisr still eats %100 cpu. I thin

Re: IPv6 NDP Proxy

2012-11-12 Thread Özkan KIRIK
you can bridge all interfaces with if_bridge. Later, assign the IPv6 addresses to the bridge0 interface. On Sun, Nov 11, 2012 at 7:28 PM, Thesaurarius Romae < thesaurarius.ro...@yandex.ru> wrote: > Hello all! > > I have a small problem - I need to give IPv6 addresses to several machines > on a

Re: Default route destination changing without warning follow-up

2012-10-16 Thread Özkan KIRIK
I was reported this behaviour before. http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/157796 On Fri, Oct 5, 2012 at 5:27 PM, Krzysztof Barcikowski wrote: > W dniu 2012-10-05 16:22, Dominic Blais pisze: > >> Hi, >> >> I'm using GENERIC. Everything else is added as loaded module. >> >> Here's my

Re: ipfw meets netmap (6.5 Mpps in userspace)

2012-08-13 Thread Özkan KIRIK
does igb driver supported by netmap ? if yes, how multiqueue support works? On Mon, Aug 13, 2012 at 4:08 PM, Luigi Rizzo wrote: > On Mon, Aug 13, 2012 at 02:42:43PM +0200, Olivier Cochard-Labb? wrote: >> On Mon, Aug 13, 2012 at 1:17 PM, Luigi Rizzo wrote: >> > I just finished a netmap-enabled ve

Re: igbX: could not setup receive structures

2012-03-05 Thread Özkan KIRIK
thank you On Mon, Mar 5, 2012 at 8:28 PM, Jack Vogel wrote: > Increase the number of nmbclusters via sysctl, internally we set it to > 262144. > > Jack > > > > 2012/3/5 Özkan KIRIK >> >> Hi, >> >> I am using FreeBSD  8.2-STABLE-201105 amd64 snapsh

igbX: could not setup receive structures

2012-03-05 Thread Özkan KIRIK
Hi, I am using FreeBSD 8.2-STABLE-201105 amd64 snapshot. System has about 200 ipfw rules. There is 78 vlans assigned on igb3. igb3 interface asserts as "igb3: Could not setup receive structures" once a day and then nic stops working. Even ifconfig down && ifconfig up doesnt help. What the probl

Re: em0 with latest driver hangs again and again (without "Watchdogtimeout" message!)

2011-03-14 Thread Özkan KIRIK
Hi Arnaud, # sysctl kern.ipc.nmbclusters kern.ipc.nmbclusters: 262144 On Mon, Mar 14, 2011 at 4:02 PM, Arnaud Lacombe wrote: > Hi, > > On Fri, Mar 11, 2011 at 9:57 AM, Özkan KIRIK wrote: >> Hi again, >> >> I wanna share state of test machine. em-7.2.2 driver runs

Re: em0 with latest driver hangs again and again (without "Watchdogtimeout" message!)

2011-03-11 Thread Özkan KIRIK
ome temporary resource shortage or error > caused > the packet to be dropped. I don't believe this is indicative of a problem, > just let it > keep running, 2 days is good but 2 weeks is better :) > > Thanks for testing it! > > Jack > > > On Sun, Mar 6, 2011 at

Re: em0 with latest driver hangs again and again (without "Watchdogtimeout" message!)

2011-03-06 Thread Özkan KIRIK
Hello, I've been testing the em.7.2.2 driver as kld. The system is up about 2 days 6 hours. System has 4 em interfaces, Throughput is about 200Mbit/s. System didn't hang, but em2 has Input Errors. I saw that, dev.em.2.mac_stats.missed_packets is not zero? What could be the problem? # uname -r 8.

Re: em0 with latest driver hangs again and again (without "Watchdog timeout" message!)

2011-02-24 Thread Özkan KIRIK
river OUT of your kernel, then untar this, build it standalone, and then > load it. > > This is just a temporary thing, once I have data to decide on this change vs > the earlier one it will get integrated. > > Jack > > > 2011/2/23 Özkan KIRIK >> >> Hi, >>

Re: em0 with latest driver hangs again and again (without "Watchdog timeout" message!)

2011-02-23 Thread Özkan KIRIK
Hi, How can we get 7.2.2. version of if_em driver ? I wanna test it. I can help you for testing changes to em drivers. Regards, Ozkan KIRIK On Wed, Feb 23, 2011 at 1:36 PM, Lev Serebryakov wrote: > Hello, Mike. > You wrote 23 февраля 2011 г., 14:16:28: > >>>   Driver from "em driver, 82574L

Re: Default router changes unexpectedly

2010-08-30 Thread Özkan KIRIK
ump to rotate > compressed captures. You can filter rip or any other dynamic routing > protocol and icmp. > > Have a nice day > > On 8/29/10, Özkan KIRIK wrote: >> Hi Volker, >> >> There is no routing deamon working on this gateway. But I started a >> tcpdu

Re: Default router changes unexpectedly

2010-08-29 Thread Özkan KIRIK
Hi Volker, There is no routing deamon working on this gateway. But I started a tcpdump that listening to port 521. I'll inform you about captured packets. Regards, Ozkan KIRIK Mersin University @ Turkey On Sun, Aug 29, 2010 at 10:09 PM, wrote: > On 08/29/10 19:50, Özkan KIR

Default router changes unexpectedly

2010-08-29 Thread Özkan KIRIK
Hi, I am using FreeBSD 7.3 STABLE-201004. IPFW + In kernel NAT and if_vlan used mostly. System has 3 em interfaces. Scenario is classical, LAN DMZ WAN. Sometimes default router changes unexpectedly. I inspected logs if someone logged in or changed route. I found nothing. This problem repeats at l

Default router changes unexpectedly

2010-08-29 Thread Özkan KIRIK
Hi, I am using FreeBSD 7.3 STABLE-201004. IPFW + In kernel NAT and if_vlan used mostly. System has 3 em interfaces. Scenario is classical, LAN DMZ WAN. Sometimes default router changes unexpectedly. I inspected logs if someone logged in or changed route. I found nothing. This problem repeats at l

Default router changes unexpectedly

2010-06-07 Thread Özkan KIRIK
Hi, I am using FreeBSD 7.3 STABLE-201004. IPFW + In kernel NAT and if_vlan used mostly. System has 3 em interfaces. Scenario is classical, LAN DMZ WAN. Sometimes default router changes unexpectedly. I inspected logs if someone logged in or changed route. I found nothing. This problem repeats at l

Re: Mpd-4.2 released.

2007-06-26 Thread Özkan KIRIK
hi; I wonder if new mpd still needs hundreds of config lines for 300 incoming pptp connections.? and does it still create a new ng interface even no pptp connections established? does new mpd support unlimited incoming connections? what about performance issuess ? (ex: cpu usage, memory usag

Re: LACP 802.3ad and ng_fec ?

2006-09-22 Thread Özkan KIRIK
2.1ad Link Aggregation protocol. hp(config)# Can ng_fec handshake with switch via "trunk" option instead of "fec" ? Antony Mawer yazmış: On 22/09/2006 6:58 PM, Özkan KIRIK wrote: Does ng_fec module support Dynamic LACP (802.3ad) protocol ? i have an HP Procurve 5406 swit

LACP 802.3ad and ng_fec ?

2006-09-22 Thread Özkan KIRIK
Hi, Does ng_fec module support Dynamic LACP (802.3ad) protocol ? i have an HP Procurve 5406 switch, i am trying to make a fail over connection between switch and freebsd. Does ng_fec support "Fail over" for links ? Have an idea? Thanks for replies by now.

Re: Multiple routes to the same destination

2006-06-23 Thread Özkan KIRIK
w add prob 0.5 fwd 10.0.0.1 all from any to not 10.0.0.0/24 keep-state ipfw add fwd 10.0.0.2 all from any to not 10.0.0.0/24 keep-state ... With this solution, if a connection established over first router, the packets belongs to same connection uses first router as gateway. Özkan KIRIK C

Re: ipfw divert with layer2 (if_bridge) packets

2006-05-10 Thread Özkan KIRIK
hi, i have a question about these similar problems with bridging. i use if_bridge on a FreeBSD 6.1 Box. ipfw doesn't support fwd rules via bridge. So that i had to use pf for transparent proxying. but pf doesnt work like fwd. pf makes nat (rdr) on packets, so that proxy software can't find the o

if_bridge not working with second interface

2005-11-27 Thread Özkan KIRIK
Hi, i am trying to bridge two interfaces via if_bridge. i built a new kernel that includes "device if_bridge" line. my physical interfaces are fxp0 and fxp1 bridge0 works with fxp0, but it doesnt work with fxp1 i tried configurations below: Note: fxp0 and fxp1 doesnt have ip adress # ifconfig

FreeBSD 6.0 - ipfw fwd with bridge mode

2005-11-20 Thread Özkan KIRIK
Hi, i am trying to forward packets via ipfw in bridge mode. is there any patch for 6.0-Release? thanks for your interests, ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "

Re: multiple interfaces

2005-08-19 Thread Özkan KIRIK
You cannot define same network to more then one interface! As you post below; xl0: inet 10.0.1.1 netmask 0x broadcast 10.0.255.255 xl1: inet 10.0.1.2 netmask 0x broadcast 10.0.255.255 They are at the same network, so your freebsd searchs 10.0.1.2 at xl0. You should define your xl