Re: epair and vnet jail loose connection.

2022-03-17 Thread Johan Hendriks
On 16/03/2022 11:36, Michael Gmelin wrote: On Wed, 16 Mar 2022 11:10:30 +0100 Santiago Martinez wrote: Guys, do you want me to run a pre/post patch perf test? i can quickly do  Spirent -> bridge - jail - bridge - jail - bridge -> spirent. Best regards. Santi Hi Santi, Thanks for offer

Re: epair and vnet jail loose connection.

2022-03-14 Thread Johan Hendriks
On 14/03/2022 16:09, Kristof Provost wrote: On 14 Mar 2022, at 7:44, Michael Gmelin wrote: On Sun, 13 Mar 2022 17:53:44 + "Bjoern A. Zeeb" wrote: On 13 Mar 2022, at 17:45, Michael Gmelin wrote: On 13. Mar 2022, at 18:16, Bjoern A. Zeeb wr

Re: epair and vnet jail loose connection.

2022-03-13 Thread Johan Hendriks
On 13/03/2022 14:06, Patrick M. Hausen wrote: Hi all, i was a bit puzzled by Michael using bhyve trying to reproduce. Up until now I thought bhyve uses tap and not epair? Anyway ... Am 13.03.2022 um 14:01 schrieb Johan Hendriks : I have no idea why it does not work on my setup, which is

Re: epair and vnet jail loose connection.

2022-03-13 Thread Johan Hendriks
On 13/03/2022 13:37, Kristof Provost wrote: On 13 Mar 2022, at 5:26, Johan Hendriks wrote: Copyd my haproxy en web01 jail to this machine and have the same problem. Do you mean you can or cannot reproduce it on the second machine? I have the same problem. Could it be a sysctl i use? or

Re: epair and vnet jail loose connection.

2022-03-13 Thread Johan Hendriks
proto { tcp, udp } from to $ext_if > > # Second rule "Block all in and pass all out" > block in log all > pass out all keep state > > # IPv6 pass in/out all IPv6 ICMP traffic > pass in quick proto icmp6 all > > # Pass all lo0 > set skip on lo0 > > #

Re: epair and vnet jail loose connection.

2022-03-12 Thread Johan Hendriks
mp-type $icmp_types keep state pass out inet proto icmp all icmp-type $icmp_types keep state pass in quick on $ext_if inet proto tcp from any to $ext_if port { 80, 443 } flags S/SA keep state pass in quick on $ext_if inet proto tcp from to $ext_if port { 4505 4506 } flags S/SA keep state block

Re: epair and vnet jail loose connection.

2022-03-11 Thread Johan Hendriks
On 09/03/2022 20:55, Johan Hendriks wrote: The problem: I have a FreeBSD 14 machine and a FreeBSD 13-stable machine, both running the same jails just to test the workings. The jails that are running are a salt master, a haproxy jail, 2 webservers, 2 varnish servers, 2 php jails one for

Re: epair and vnet jail loose connection.

2022-03-10 Thread Johan Hendriks
On 10/03/2022 13:37, Wolfgang Zenker wrote: Hi Kristof, Am Thu, Mar 10, 2022 at 12:44:00PM +0100 schrieb Kristof Provost: On 10 Mar 2022, at 10:13, Johan Hendriks wrote: On 10/03/2022 08:54, Patrick M. Hausen wrote: Hi Johan, we experience the same on 13.1-PRERELEASE. Currently trying to

Re: epair and vnet jail loose connection.

2022-03-10 Thread Johan Hendriks
On 10/03/2022 08:54, Patrick M. Hausen wrote: Hi Johan, we experience the same on 13.1-PRERELEASE. Currently trying to collect some evidence (dtrace) to send to Kristof Provost who was so kind to assist. We are hit by the problem in production in 12-24 hour intervals. Have not done any artif

Re: epair and vnet jail loose connection.

2022-03-09 Thread Johan Hendriks
022 om 20:55 schreef Johan Hendriks : > The problem: > I have a FreeBSD 14 machine and a FreeBSD 13-stable machine, both running the > same jails just to test the workings. > > The jails that are running are a salt master, a haproxy jail, 2 webservers, > 2 varnish servers, 2 php

epair and vnet jail loose connection.

2022-03-09 Thread Johan Hendriks
The problem: I have a FreeBSD 14 machine and a FreeBSD 13-stable machine, both running the same jails just to test the workings. The jails that are running are a salt master, a haproxy jail, 2 webservers, 2 varnish servers, 2 php jails one for php8.0 and one with 8.1. All the jails are