Re: Is it worth the effort to make proxy and server communicate via Unix socket?

2012-10-01 Thread Anders Nordby
Hi, On man, okt 01, 2012 at 12:24:19pm -0400, Mikhail T. wrote: > In a fairly common setup today, a proxy (say, Varnish) runs on the same > system as the actual "backend" server (such as Apache). > > Would it be worthwhile to alter them both to allow them to talk via a > socket instead of via T

Re: TCP options order changed in FreeBSD 7, incompatible with some routers

2008-04-11 Thread Anders Nordby
Hi, On Wed, Apr 09, 2008 at 08:23:13AM +, Bjoern A. Zeeb wrote: >> I had the same problem, and temporarily worked around it by disabling >> SACK: > ok, here we go... > > as I had explained on freebsd-net@ lately there had been 2 changes to > possibly fix this issue. > > I am currently in the

Re: TCP options order changed in FreeBSD 7, incompatible with some routers

2008-04-09 Thread Anders Nordby
Hi, I had the same problem, and temporarily worked around it by disabling SACK: sysctl net.inet.tcp.sack.enable=0 Which solved my problems. It would be interesting to see if this helps you also? If so, it seems this issue is related to SACK and TCP order maybe? Hmm. On Fri, Apr 04, 2008 at 01:

Re: Networking FreeBSD Wiki

2007-02-23 Thread Anders Nordby
Hi, George, maybe there should be a separate category in GNATS also, for network issues? On Thu, Feb 08, 2007 at 05:07:31PM -0800, [EMAIL PROTECTED] wrote: > I've started a Wiki page in the FreeBSD Wiki in an attempt to > coordinate some of the clean up work and networking projects that > aren't

Re: IPF and OOW problems

2006-08-06 Thread Anders Nordby
Hi, The current version of IP Filter in FreeBSD has bugs in the handling of TCP out-of-window checks. Check/follow http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/98978 for a solution. On Mon, Jun 12, 2006 at 02:02:17PM +0200, Sébastien A. VALSEMEY wrote: > Hello, > > I currently have a FreeBSD

iwi stability when doing large file transfers/backups

2006-03-01 Thread Anders Nordby
Hi, I'm having great difficulties taking backup of my laptop computer. It's a Fujitsu Siemens Lifebook E8020 system with a Intel PRO/Wireless 2915ABG NIC. I'm connected to a FreeBSD hostap, using WPA2 (CCMP/AES). Updating to 6-STABLE (6.1-PRERELEASE) seems to have improved the stability of the iw

Re: 64-bit SNMP counters for FreeBSD && graphing bandwidth usage

2006-02-14 Thread Anders Nordby
Hi, Done. On system with bge and 100 mbps link speed, I get: IF-MIB::ifName.1 = STRING: bge0 IF-MIB::ifName.2 = STRING: bge1 IF-MIB::ifName.3 = STRING: lo0 IF-MIB::ifHighSpeed.1 = Gauge32: 100 IF-MIB::ifHighSpeed.2 = Gauge32: 0 IF-MIB::ifHighSpeed.3 = Gauge32: 0 On system with bge and gigabit li

Re: bsnmpd (was: 64-bit SNMP counters for FreeBSD && graphing bandwidth usage)

2006-02-14 Thread Anders Nordby
Hi, On Tue, Feb 14, 2006 at 01:39:01PM +0300, Gleb Smirnoff wrote: > A> I should make a list of "what bsnmpd needs" to be more usable, in case > A> Harti is interested. ;-P > Where is such list? Some things popping off my mind: - Ability to run as a different user. I suppose we should add a snmp

Re: 64-bit SNMP counters for FreeBSD && graphing bandwidth usage

2006-02-14 Thread Anders Nordby
Hi, On Tue, Feb 14, 2006 at 11:44:59AM +0300, Gleb Smirnoff wrote: > H> The driver reports a speed of 10Mbits/sec. ifHighSpeed is ifi_baudrate > H> divided by 10^6 (and rounded). This is the default set by ether_ifattach() > H> if the driver did not set another value. It seems that bge never set

Re: 64-bit SNMP counters for FreeBSD && graphing bandwidth usage

2006-02-14 Thread Anders Nordby
On Tue, Feb 14, 2006 at 09:07:42AM +0100, Harti Brandt wrote: >>It seems ifHCInOctets and ifHCOutOctets are missing. How come? Do I need >>to use SNMP v3? Another query tool? > 10 bits/seconds seems utterly wrong for bge interfaces :-) The HC counters > appear only for speeds >= 20Mbit/sec accordi

Re: 64-bit SNMP counters for FreeBSD && graphing bandwidth usage

2006-02-13 Thread Anders Nordby
Hi, On Tue, Feb 07, 2006 at 05:11:31PM +0300, Gleb Smirnoff wrote: >> Is there any way to have 64-bit SNMP counters in FreeBSD? Especially for >> ifInOctets/ifOutOctets. It seems the built-in bsnmpd only has >> Counter32, and net-snmpd the same (--enable-mfd-rewrites, which is >> supposed to help,

64-bit SNMP counters for FreeBSD && graphing bandwidth usage

2006-02-06 Thread Anders Nordby
Hi, Is there any way to have 64-bit SNMP counters in FreeBSD? Especially for ifInOctets/ifOutOctets. It seems the built-in bsnmpd only has Counter32, and net-snmpd the same (--enable-mfd-rewrites, which is supposed to help, seems to only work in Linux). My systems are pushing more than 100 mbps t

Filtering jail IP traffic

2005-08-26 Thread Anders Nordby
Hi, IP traffic from one jail to another jail, arrives on destination jail on lo0 having the destination jails IP as source IP. Why not the source jail's IP address? How can I filter traffic from one jail to another, using ipfw of ipf? Cheers, -- Anders.

Re: Jails, Portmap, Dracd

2004-06-29 Thread Anders Nordby
Hi, I got tired of dracd's RPC business too. I use ports/mail/pop-before-smtp now, works fine for me. On Tue, Jun 29, 2004 at 10:41:09AM -0400, Tony Holmes wrote: > Hi, > > I'm attempting to set up jails in a 4.9S environment using the newer > rpc versions of dracd. I'm encountering no ends of t

Re: ipfw uid rules and matching specific services for bandwidth limiting

2001-01-01 Thread Anders Nordby
On Tue, Jan 02, 2001 at 01:14:18AM +0100, Anders Nordby wrote: > FYI I am running 4.1.1-STABLE as of Tue Oct 24 01:25:55 CEST 2000, and top(1) > shows all proftpd processes as being owned by root. If I filter on uid root, the rules will match the packets (I tried with specific IPs + ui

Re: ipfw uid rules and matching specific services for bandwidth limiting

2001-01-01 Thread Anders Nordby
On Mon, Jan 01, 2001 at 05:24:09PM -0600, Bill Fumerola wrote: >> Are people actually using uid type rules heavily? I'm having trouble matching >> the packets generated by programs like Apache and ProFTPD. I believe that may >> be because of root binding the ports these programs use before they se

ipfw uid rules and matching specific services for bandwidth limiting

2001-01-01 Thread Anders Nordby
Hello, Are people actually using uid type rules heavily? I'm having trouble matching the packets generated by programs like Apache and ProFTPD. I believe that may be because of root binding the ports these programs use before they setuid() or something, I'm not sure. Particularly I have trouble m