Re: running cron jobs setpriority permission denied

2022-03-09 Thread Sami Halabi
Hi, Thank You!! indeed that helped! Sami On Wed, Mar 9, 2022 at 11:03 AM Ronald Klop wrote: > It sounds similar to this issue. > > https://github.com/cbsd/cbsd/issues/437 "default nice 1 prevents cron in > jail #437" > > Does that help? > > Regards, &g

running cron jobs setpriority permission denied

2022-03-08 Thread Sami Halabi
ASE-p1 GENERIC amd64 what am I missing? Sami -- Sami Halabi Information Systems Engineer NMS Projects Expert, FreeBSD SysAdmin Expert Asterisk Expert

Re: linux debian jail - network problems

2022-02-24 Thread Sami Halabi
for username and password.. its not public review? Sami בתאריך יום ו׳, 25 בפבר׳ 2022, 04:18, מאת Zhenlei Huang ‏< zlei.hu...@gmail.com>: > Hi, > You can also track the WIP netlink feature, > https://reviews.freebsd.org/D33975 > > On Feb 25, 2022, at 4:05 AM, Sami Halabi w

Re: linux debian jail - network problems

2022-02-24 Thread Sami Halabi
Hi, Added Current, maybe will be lucky ;) Anyone have idea how approach and fix this? Sami בתאריך יום ג׳, 22 בפבר׳ 2022, 23:30, מאת Sami Halabi ‏: > Hi all, > sorry for the cross post but I need help and I'm not sure where it hangs. > > I create linux jail (debian bullseye

linux debian jail - network problems

2022-02-22 Thread Sami Halabi
erfaces Any Idea how to fix this?? cbsd@j2> named -V BIND 9.16.22-Debian (Extended Support Version) running on Linux x86_64 3.2.0 FreeBSD 12.3-RELEASE-p1 GENERIC installing newer versions I have also problems with dovecot mail package.. but will leave it for now Thanks in advance, Sami

Re: Netgraph VLANs on Hyper-V

2020-04-10 Thread Sami Halabi
Hi, If I recall correctly it has something to do with Mac addresses netgraph expose not recognized by Hyper-v and maybe other Hypetvisors. Myabe someone can shed more light on it. Sami בתאריך יום ו׳, 10 באפר׳ 2020, 10:07, מאת Reshad Patuck ‏< reshadpatu...@gmail.com>: > Hi, > >

SD-Wan

2019-03-19 Thread Sami Halabi
Hi everyone, All buzz around Software-Defined Wan.. I wonder what is in the base of its fundamentals and what does FreeBSD has to offer in the subject. Sami ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net

Re: need help using ng_patch to modify src/dst packets or alternative way

2017-12-17 Thread Sami Halabi
Hi Eugene, I'm looking for a solution for IP traffic. in linux iptables its possible but I couldn't find freebsd way yet. bkuncr soulution works for tcp only. Thanks for the hint though, Sami בתאריך 17 בדצמ׳ 2017 11:29 AM,‏ "Eugene Grosbein" כתב: > 17.12.2017 14:52, Sa

need help using ng_patch to modify src/dst packets or alternative way

2017-12-16 Thread Sami Halabi
box i see the packets arrive on my 160 rule but never leaves the box.. I would at least see packeta flow one direction to 10.1.1.2 and then that need another ipfw and netgraph opposite rule. If you have alternative way I'm happy to try... Help much appr

Re: A web server behind two gateways?

2017-07-17 Thread Sami Halabi
, and apache/nginx, since the ip of the db is the internal ip between jails it'll connect to the 1st db. this way you have 2 jails that share same data dir but service users vian different wans behind nat. Hope the idea helps. Sami בתאריך 17 ביולי 2017 02:34 PM,‏ "Eugene Grosbein&qu

Re: MPLS protocol on FreeBSD

2017-04-01 Thread Sami Halabi
Hi, I Asked several times about getting mpls into freebsd but seems its not gonna happen. Alexander Chernikov work was not completed (not i know of otherwise) and even his site for that matter seems down for long time. Sami בתאריך 1 באפר׳ 2017 05:45 PM,‏ "kdev code" כתב: I search how

Re: Slow performance with Intel X540-T2 10Gb NIC

2016-07-22 Thread Sami Halabi
hi, would you share what was wrong in the windows side and how you solved it? Sami בתאריך 22 ביולי 2016 12:33 AM,‏ "Chris Dunbar" כתב: > Hello again, > > I have good news and bad news: > > The bad news first: I am an idiot and I have wasted some of your time for >

Re: Status of MPLS in FreeBSD

2016-04-04 Thread Sami Halabi
hi again, Silence means dead project? even the mpls site is dead :( linux and openbsd best choices for mpls implementation right now? Sami ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe

Re: Status of MPLS in FreeBSD

2016-03-31 Thread Sami Halabi
anyone? sami בתאריך 18 במרץ 2016 21:39,‏ "Sami Halabi" כתב: > hi , > I would like to ask about the status of implementing MPLS in FreeBSD. > Are there any progress ? is it going to be implemented soon? > > Sami > ___ fre

Re: Identify physical port given a network interface name on Dell PowerEdge servers?

2016-03-29 Thread Sami Halabi
Hi, I'm not aware of any. but if you identify once you can set description to the interface so building a script based on it would be easy. Sami בתאריך 30 במרץ 2016 12:48 AM,‏ "Pallav Bose via freebsd-net" < freebsd-net@freebsd.org> כתב: > Hello, > Is there a w

Re: Taking bhyve step forward enterprise grade

2016-03-22 Thread Sami Halabi
is it builtin already in 10.3? or in current only? בתאריך 19 במרץ 2016 18:55,‏ "Jim Thompson" כתב: > > > On Mar 19, 2016, at 10:55 AM, John Nielsen wrote: > > > >> On Mar 19, 2016, at 8:12 AM, Sami Halabi wrote: > >> > >> hi, > >&g

Taking bhyve step forward enterprise grade

2016-03-19 Thread Sami Halabi
hi, are there ongoing job on taking bhyve further steps toward enterprise scale like: 1. high availability, rules on vms (like affinity rules in vmware: eg an app vm and sql vm go together...), vmotion... 2. network virtualization like vmware nsx... Thanks in advance, Sami

Status of MPLS in FreeBSD

2016-03-19 Thread Sami Halabi
hi , I would like to ask about the status of implementing MPLS in FreeBSD. Are there any progress ? is it going to be implemented soon? Sami ___ freebsd-net@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe

RE: Same NIC name to MAC mapping on FreeBSD

2015-07-06 Thread Sami Halabi
there was a similar discussion.. thread by the name: "Network Interface name change". sami בתאריך 6 ביולי 2015 09:30,‏ "Wei Hu" כתב: > > > > -Original Message- > > From: Julian Elischer [mailto:jul...@freebsd.org] > > Sent: Saturday, July 4

traffic prioritize

2015-04-17 Thread Sami Halabi
add 5000 allow all from any to any Sami ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: Network Interface name change

2015-04-13 Thread Sami Halabi
Hi, use: ifconfig em0 name em1 note that if u have em2,3,.. u need to start in descending order 3,2,1... so u wont have collissions. Sami בתאריך 13 באפר׳ 2015 22:55,‏ "Raí" כתב: > > > El 13/4/2015, a las 19:45, Sami Halabi escribió: > > Hi, > the simest way is to w

Re: Network Interface name change

2015-04-13 Thread Sami Halabi
Hi, the simest way is to write a script that seeks for MACs and sets names upon system restart. of course if anyone has an elegant way or patch its bretter. Sami בתאריך 13 באפר׳ 2015 19:14,‏ "Raimund Sacherer" כתב: > Hello, > > We have one firewall (out of a cluster) in a v

Re: fastforward/routing: a 3 million packet-per-second system?

2014-07-24 Thread Sami Halabi
Hi, Can you share tununings and patches? Thanks in advance, Sami בתאריך 24 ביול 2014 12:24, "Andrey V. Elsukov" כתב: > On 22.07.2014 19:18, John Jasen wrote: > > Feedback and/or tips and tricks more than welcome. > > > > Outstanding questions: > > > &g

Re: A question on modifying packet.

2014-07-09 Thread Sami Halabi
from any to 239.0.0.19 dst-port 1234 in via vlan999 Sami On 7/9/14, 1:01 PM, Niu Zhixiong wrote: > Hi, all > I have only one NIC. I want to capture packets from one certain ip address > and change the both src and dst addresses and forward to other destination > via the same NIC. It is

Re: Can you create a FreeBSD gateway, with private IPs, without NAT/divert ?

2014-06-06 Thread Sami Halabi
Apparently from your mail you dont need anything since your isp is making the nat. Sami בתאריך 7 ביונ 2014 09:25, "None Secure via freebsd-net" < freebsd-net@freebsd.org> כתב: > I've built a lot of gateways/routers with FreeBSD - but they have always > been with real,

Re: dummynet/ipfw high load?

2014-04-11 Thread Sami Halabi
Hi, I had similar problem on the past and it turned to be the ammount of rules in ipfe. Using reduced subset with tables actually reduced the load. Sami ‏בתאריך יום שישי, 11 באפריל 2014, Dennis Yusupoff כתב: > Good day, gurus! > > We have a servers on the FreeBSD. They do NAT, sh

Re: Network stack changes

2013-09-23 Thread Sami Halabi
cleanly but had errors compiling new kernel... is there any work to make it work? i'd love to test it. Sami On Sun, Sep 22, 2013 at 11:12 PM, Alexander V. Chernikov < melif...@yandex-team.ru> wrote: > On 29.08.2013 15:49, Adrian Chadd wrote: > >> Hi, >> &

Re: DNAT in freebsd

2013-07-06 Thread Sami Halabi
Hi, Any hope? Thanks in advance, Sami בתאריך 3 ביול 2013 14:06, מאת "Sami Halabi" : > Hi Julian, > > I appreciate your willing to help me. > > My Situation in short is: > > --- [a] - [b] - > internet B

Re: DNAT in freebsd

2013-07-03 Thread Sami Halabi
: 193.xx.yy.2 dst: 84.xx.yy.1 to be translated as: packet hdr: src: 192.168.0.1 dst 192.168.0.2 btw: any other packet from src other than 193.xx.yy.2 to dst 84.xx.yy.1 should be dropped. Again thanks for you help, I hope I supplied all the info needed to help me. Sami On Wed, Jul 3, 2013 at 7

Re: DNAT in freebsd

2013-07-02 Thread Sami Halabi
Hi again, So far no solution Is there really no alternative in FreeBSD? Sami בתאריך 1 ביול 2013 14:16, מאת "Sami Halabi" : > Hi, > I did ping 10.0.1.1 from 10.0.1.2, so packet is 10.0.1.2 ->10.0.1.1 > > ipfw add 1000 nat 1 all from 10.0.1.2 to 10.0.1.1 >

Re: DNAT in freebsd

2013-07-01 Thread Sami Halabi
t from 11.0.3.1->10.0.1.1 > ipfw add 2000 nat 2 all from 11.0.3.1 to 10.0.1.1 no translation is done at all! Sami > ipfw add 3000 nat 2 all from 11.0.4.2 to 11.0.3.1 > ipfw add 4000 nat 1 all from 10.0.1.1 to 11.0.3.1 > > > ipfw nat 1 config same_ports ureg_only ip 11.0.3.1

Re: DNAT in freebsd

2013-07-01 Thread Sami Halabi
Hi, forgot to mention that but this sysctl is already set to 0. i see in the logs packets pass 1000 rule. Sami On Mon, Jul 1, 2013 at 12:17 PM, Eugene Grosbein wrote: > On 01.07.2013 14:30, Sami Halabi wrote: > > Hi, > > > > I've tried the following: > >

Re: DNAT in freebsd

2013-07-01 Thread Sami Halabi
ing... Thanks in advance, Sami On Sun, Jun 30, 2013 at 11:27 PM, Sami Halabi wrote: > Hi Eugene, > > It simply doesn't work for me, the reverse option doesn't work properly > for me it keeps translating the source instead of the destination... > > > On Sun, J

Re: DNAT in freebsd

2013-06-30 Thread Sami Halabi
Hi Eugene, It simply doesn't work for me, the reverse option doesn't work properly for me it keeps translating the source instead of the destination... On Sun, Jun 30, 2013 at 6:32 PM, Eugene Grosbein wrote: > On 30.06.2013 18:48, Sami Halabi wrote: > > Hi, > &g

Re: DNAT in freebsd

2013-06-30 Thread Sami Halabi
Hi, I don't understand how reverse mode works exactly, and didn't find a good example. can you try and help on the configuration? Thanks in advance, Sami On Sun, Jun 30, 2013 at 1:22 PM, Eugene Grosbein wrote: > On 29.06.2013 13:50, Sami Halabi wrote: > > I think

Re: DNAT in freebsd

2013-06-30 Thread Sami Halabi
cial public ip 194.xx.yy.1, and when 193.xx.yy.1 wants to open connection with 192.168.0.2 it will connect to 194.xx.yy.1 and 192.168.0.2 will think 192.168.0.1 is talking with it... Any ideas??? Sami On Sun, Jun 30, 2013 at 12:15 PM, Paul A. Procacci wrote: > > On Sat, Jun 29, 2013 at 09

Re: DNAT in freebsd

2013-06-29 Thread Sami Halabi
Any buyers? :) I need your kindly help on this... Sami בתאריך 29 ביונ 2013 09:50, מאת "Sami Halabi" : > I think I was misunderstood... > Here is the situation i want to handle: > My box is a router that handles several /24 behind. > One of my links (em0) is connecte

Re: DNAT in freebsd

2013-06-28 Thread Sami Halabi
193.xxx.yyy.2 using specific public ip 84.xx.yy.1 And packets comming to my public 84.xx.yy.1 ip to be trsnslated as came from 192.168.0.1 and sent to 192.168.0.2/or ant other ips behind(192.168.1.xx/24). Hope that makes it clearer, and I appreciate any help. Sami בתאריך 29 ביונ 2013 03:30, מאת

DNAT in freebsd

2013-06-28 Thread Sami Halabi
transparancy. Thanks in advance, -- Sami Halabi Information Systems Engineer NMS Projects Expert FreeBSD SysAdmin Expert ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to

Dnay

2013-06-28 Thread Sami Halabi
Hi, I would like to perform a full dnat/snat as in iptbles in: linux-ip.net/html/nat-dnat.html How it can be done in fbsd, I use ipgw. Thanks in advance, Sami ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net

Re: MPLS

2013-06-14 Thread Sami Halabi
Hi Alex, Got any progress? I'm excited to test mpls in fbsd :) Sami בתאריך 15 במאי 2013 17:43, מאת "Sami Halabi" : > Hi Alex, > Any progress on mpls fbsd? > > Thanks in advance, > Sami > On Mar 17, 2013 8:57 PM, "Alexander V. Chernikov" > wrot

Re: MPLS

2013-05-15 Thread Sami Halabi
Hi Alex, Any progress on mpls fbsd? Thanks in advance, Sami On Mar 17, 2013 8:57 PM, "Alexander V. Chernikov" wrote: > On 17.03.2013 13:20, Sami Halabi wrote: > >> any one? :) >> >> >> On Fri, Mar 15, 2013 at 6:28 PM, Sami Halabi wrote: >> >&g

Re: using netmap

2013-04-28 Thread Sami Halabi
Thank you. I've started using pkt-gen in virtualbox, 2 machines singlwe core-i7 3612QM core, with em cards internal. I see that the sender send about 950 kpps but the receiver is far less (around 200kpps max). Any suggestions why this? Sami On Apr 26, 2013 11:23 AM, "Luigi Rizzo"

Re: using netmap

2013-04-25 Thread Sami Halabi
lude // XXX do we need it ? #endif /* !NO_PCAP */ #endif // XXX hack #include /* pthread_* */ #include /* le64toh */ #include #include /* pthread w/ affinity */ #include /* cpu_set */ #include /* LLADDR */ === Thanks in advance, Sami

Re: using netmap

2013-04-25 Thread Sami Halabi
%d\n",&ring->slot[i].len); ring->cur = NETMAP_RING_NEXT(ring, i); } } return 0; } On Mon, Apr 15, 2013 at 9:15 PM, Andreas Nilsson wrote: > > > > On Mon, Apr 15, 2013 at 7:52 PM, Sami Halabi wrote: > >> Hi, >> I would like

Re: forwarding/ipfw/pf evolution (in pps) on -current

2013-04-24 Thread Sami Halabi
fw) that went down again somewhere before Clang got prod. 4. I think that the results don't necessarly can be translated to SMP versions because of scheduler, affinity issues. For now i would continue using ipfw :-) Sami On Apr 24, 2013 1:45 PM, "Olivier Cochard-Labbé" wrote: >

Re: Odd NAT/IPSEC question -- help! :-)

2013-04-20 Thread Sami Halabi
Be sure default gateway is properly cobfigured on the client not only the tunnel Sami On Apr 21, 2013 6:42 AM, "Karl Denninger" wrote: > I don't think so -- gre is not involved in the config. > > On 4/20/2013 7:59 PM, Steven Hartland wrote: > > - Original Messa

using netmap

2013-04-15 Thread Sami Halabi
7;struct netmap_ring' has no member named 'avail' n.c:27: error: 'struct netmap_ring' has no member named 'cur' n.c:28: error: 'struct netmap_ring' has no member named 'nr_buf_size' n.c:29: warning: implicit declaration of f

Re: MPLS

2013-04-02 Thread Sami Halabi
igi did with Netmap? or performance out of the box in GENERIC? Sami On Tue, Apr 2, 2013 at 9:16 AM, Sepherosa Ziehau wrote: > On Mon, Mar 18, 2013 at 9:41 PM, Andre Oppermann > wrote: > > On 18.03.2013 13:20, Alexander V. Chernikov wrote: > >> > >> On 17.03.2013, at 23

Re: MPLS

2013-03-17 Thread Sami Halabi
any one? :) On Fri, Mar 15, 2013 at 6:28 PM, Sami Halabi wrote: > Hi, > Are there ongoing job of mpls in freebsd? > I saw thd site http://freebsd.mpls.in for aboug a year now and I don't > see much progress. > ITOH OpenBSD has a complete implementation of MPLS out of the

MPLS

2013-03-15 Thread Sami Halabi
ation of BIRD. Thanks in advance, Sami ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: Default route changes unexpectedly

2013-03-05 Thread Sami Halabi
Hi, I can say also i faced this problem in 9.1-preRelease. And i'm not using pf, i usyally use ipfw. but i didn't see this happening for a while... Sami On Mar 5, 2013 7:39 PM, "Nick Rogers" wrote: > Hello, > > I am attempting to create awareness of a serious issue

Re: Patch: carpdev for 9.1-RELEASE.

2013-02-05 Thread Sami Halabi
Hi, Is there explaination somewhere what ix carpdev, benefits snd usage? I googled, an endex on mailinv listz nog describing but bringing carpdev frkm open/net bsd. Thanks in advance, Sami On Feb 6, 2013 5:44 AM, "Marcelo Araujo" wrote: > Hello all, > > Based on all changes

vimage & routetables

2013-01-08 Thread Sami Halabi
hi, I want to compile new kernel with vimage and multiple.routing tables in host, would that work? Or to expect kernel panics? I want to be able to mske.independent stack jails & usr setfib in host to create vrfs... Thank you in advance,

firewall rules for core router

2013-01-08 Thread Sami Halabi
Anh one? בתאריך 7 בינו 2013 18:09, מאת "Sami Halabi" : > Hi, > i have a core router that i want to enable firewall on it. > is these enough for a start: > > ipfw add 100 allow all from any to any via lo0 > ipfw add 25000 allow all from me to any > ipfw add 25100 all

Re: ixgbe and ixgbevf drivers are not working in virtualization environment

2012-10-26 Thread Sami Halabi
Hi, did you try explicit "ifconfig ix0 up" instead of rebooting? Sami On Thu, Oct 25, 2012 at 4:29 PM, Rémi Pauchet wrote: > more informations about the SR-IOV issue. > > The problem is that the link is not updated in the virtual machine (VF > driver). > > ie:

Re: ating 100Gbit transfer rate

2012-07-14 Thread Sami Halabi
Thank you kevin. Is there anybody with suggestions also? Thanks in advance, Sami On Thu, Jul 12, 2012 at 7:04 PM, Kevin Oberman wrote: > On Wed, Jul 11, 2012 at 9:45 PM, Sami Halabi wrote: > > Hi, > > Thank your for your response. > > > > i have 2 questions:

Re: ating 100Gbit transfer rate

2012-07-11 Thread Sami Halabi
you explain more how do these routers saturate 100GB. Thanks, Sami On Thu, Jul 12, 2012 at 6:43 AM, Kevin Oberman wrote: > On Wed, Jul 11, 2012 at 1:31 PM, Sami Halabi wrote: > > Hi, > > > > We have several boxes using 10G cards and using most of the bandwidth. > >

Re: ipfw rules consuming CPU

2012-06-09 Thread Sami Halabi
on my box with 130 rules 100Mbit the cpu don't go above 5%. I daily manage 1.5-6GB. Thanks in advance, Sami On Sat, Jun 9, 2012 at 11:21 PM, Michael Spratt < m...@magicislandtechnologies.com> wrote: > I have Linux & FreeBSD systems running ipfw with 80 rules with 70Mb/s &g

Re: ipfw rules consuming CPU

2012-06-09 Thread Sami Halabi
Hi, all rules togther less than 80 rules how tablearg helps this? each ip & pipe (up & down) are unique... any other advices? Sami On Sat, Jun 9, 2012 at 1:15 PM, Alexander V. Chernikov wrote: > On 09.06.2012 01:56, Sami Halabi wrote: > >> Hi, >> >> I Ma

ipfw rules consuming CPU

2012-06-08 Thread Sami Halabi
y to any via ix0 Any advice why this happens? or should it be there in the first place? I use FreeBSD 8.1-R-p10-amd64. Thanks in advance, -- Sami Halabi Information Systems Engineer NMS Projects Expert FreeBSD SysAdmin Expert ___ freebsd-net@freebsd.org

Re: recommended 10g cards

2012-06-08 Thread Sami Halabi
ic yet) on fbsd 8 for a year now. good luck. Sami On Fri, Jun 8, 2012 at 6:43 PM, Sean Bruno wrote: > On Thu, 2012-06-07 at 23:54 -0700, Daniel Braniss wrote: > > Hi > > I will be 'experimenting' with 10g in the next few months, so > > I need to buy some cards, &g

Re: ECMP and RADIX_MPATH

2012-05-17 Thread Sami Halabi
Hi, what form of load balancing it makes? is that apply to 8.3-R/S also? thanks, Sami On Thu, May 17, 2012 at 8:56 PM, Li, Qing wrote: > It is not working properly in one case, of load balancing among physical > interfaces having a single prefix, all are attached to the same physical

MPLS in freebsd

2012-05-06 Thread Sami Halabi
Hi, is there any on-job work on MPLS support in FreeBSD? what are the plan to integrate this in production use? Thanks in advance, -- Sami Halabi Information Systems Engineer NMS Projects Expert ___ freebsd-net@freebsd.org mailing list http

Re: Intel 10 GbE cards (ixgbe)

2012-05-01 Thread Sami Halabi
Hi, I KNOW you own the driver,i just mentioned that because its not listed on intel's site,and that would be a base for decisions when someone want to pick a card that works on fbsd:) so its better get listed as well, no one is going to check *.c files. Sami On Tue, May 1, 2012 at 9:06 PM,

Re: Intel 10 GbE cards (ixgbe)

2012-05-01 Thread Sami Halabi
x540has no fbsd driver Sami On Tue, May 1, 2012 at 6:42 PM, Jack Vogel wrote: > The 82599 is and has been officially supported for some time, the manual > tends to lag, I will try and get it updated. In fact, given a choice I > would always > go with the 599. And yes, the X540 shou

Re: Intel 10 GbE cards (ixgbe)

2012-04-28 Thread Sami Halabi
for now 6G in production On Fri, Apr 27, 2012 at 4:32 PM, Barney Cordoba wrote: > How much traffic are you passing during peak times? > > --- On Wed, 4/25/12, Sami Halabi wrote: > > > From: Sami Halabi > > Subject: Re: Intel 10 GbE cards (ixgbe) > > To: "

Re: Intel 10 GbE cards (ixgbe)

2012-04-25 Thread Sami Halabi
Hi, I have it running on fbsd-8.1-r for more than 1.5 years now without issues, i had problem when i first installed it, but they were disappeared when i installed 2.3.8 driver, today there is 2.4 versionon stable. Sami On Wed, Apr 25, 2012 at 2:25 PM, Takuya ASADA wrote: > Hi Marko, > &

Re: userfw - modular packet filter

2012-02-13 Thread Sami Halabi
Hi Maxim, what are the other advantages on ipfw/pf ? like did you make speed measures? does packet leave the firewall faster? Sami On Mon, Feb 13, 2012 at 1:20 PM, Maxim Ignatenko wrote: > 2012/2/13 Andrey V. Elsukov : > > On 13.02.2012 14:31, Maxim Ignatenko wrote: >

Re: ng_mppc_decompress: too many (4094) packets dropped, disabling node

2012-01-05 Thread Sami Halabi
where i can find explanation for these sysctls, the manual has some of the sysctls but not all... are these values in bits or bytes? Sami On Thu, Jan 5, 2012 at 5:03 PM, Eugene Grosbein wrote: > On Thu, Jan 05, 2012 at 03:43:45PM +0200, Sami Halabi wrote: > > > Somthing st

Re: ng_mppc_decompress: too many (4094) packets dropped, disabling node

2012-01-05 Thread Sami Halabi
Hi, is setting these sysctl's that high recommended? i don't really know what they mean, and honestly didn't search to see what they do, i simply tried to set them high in order to improve the service. if its recommended, then i would test these changes if they will be done. Sami

Re: ng_mppc_decompress: too many (4094) packets dropped, disabling node

2012-01-05 Thread Sami Halabi
:23 mpd2 mpd: Incoming L2TP packet from 172.19.246.206 1701 Jan 5 16:10:23 mpd2 mpd: L2TP: ppp_l2tp_ctrl_create: No buffer space available Now i just returned to my original sysctl: net.graph.recvspace=40960 net.graph.maxdgram=40960 and everything seems fine any ideas? Sami 2012/1/5 Gleb Smirn

Re: ng_mppc_decompress: too many (4094) packets dropped, disabling node

2012-01-05 Thread Sami Halabi
ol_dseq=1 enable_dseq=1 } Rec'd response "getsessconfig" (4) from "[1fd8e]:": Args: { session_id=0xd9d8 peer_id=0x1 control_dseq=1 enable_dseq=1 } Rec'd response "getsessconfig" (4) from "[1e9bf]:": Args: { session_id=0xac50 peer_id=0x1 contro

Re: ng_mppc_decompress: too many (4094) packets dropped, disabling node

2012-01-05 Thread Sami Halabi
Hi, there is a problem whith this script: # ngctl ls | awk '{ if ($4 == "l2tp") print $6}' ngctl: send msg: No buffer space available Sami 2012/1/5 Gleb Smirnoff > Sami, > > I'm trying to reproduce a reordering problem with a new node, and > I've fou

Re: kernel: nd6_setmtu0: new link MTU on ng29 (1218) is too small for IPv6

2012-01-04 Thread Sami Halabi
171 netmask 0x so MTU is indeed 1218 Sami 2012/1/4 Gleb Smirnoff > On Wed, Jan 04, 2012 at 12:59:18PM +0200, Sami Halabi wrote: > S> I'm using a FreeBSD8.2-R-p5 in conjunction with MPD5.5 port for creating > S> pptp/l2tp tunnels. > S> > S> I'm using MPP

kernel: nd6_setmtu0: new link MTU on ng29 (1218) is too small for IPv6

2012-01-04 Thread Sami Halabi
er (Alexander Motin) and this isn't a MPD problem, rather than a kernel issue as the logs say. why this problem happens when no IPv6 is in work? I don't want to disable ipv6 completely since i have plans in using it in the near future. Any help appreciated, Thanks in advance, -- Sa

Re: ng_mppc_decompress: too many (4094) packets dropped, disabling node

2011-12-27 Thread Sami Halabi
l: i hope the patch will solve the problem for good now, i'll let it work for the coming few days andif something will go wrong i'll paste you. Sami 2011/12/27 Gleb Smirnoff > On Tue, Dec 27, 2011 at 09:44:23AM +0200, Sami Halabi wrote: > S> >1) Is the number always 409

Re: Firewall Profiling.

2011-12-27 Thread Sami Halabi
Hi, do you use dummynet? what is the server hardware configuration and tunings you did to acheive 10Gbps ? Sami On Tue, Dec 27, 2011 at 1:36 PM, Alexander V. Chernikov < melif...@freebsd.org> wrote: > On 27.12.2011 04:54, Pawel Tyll wrote: > >> Hi lists, >> >> Are

Re: ng_mppc_decompress: too many (4094) packets dropped, disabling node

2011-12-27 Thread Sami Halabi
okay, i reverted back to my original ng_mppc.c. btw: there an alternative module in here: http://www.mavhome.dp.ua/MPPC/ maybe this helps.. Sami 2011/12/27 Gleb Smirnoff > Sami, > > On Tue, Dec 27, 2011 at 10:42:58AM +0200, Sami Halabi wrote: > S> i see in the logs many 4092,

Re: ng_mppc_decompress: too many (4094) packets dropped, disabling node

2011-12-27 Thread Sami Halabi
won't crash to usesrs... what do you recommend? Sami 2011/12/27 Gleb Smirnoff > On Tue, Dec 27, 2011 at 09:44:23AM +0200, Sami Halabi wrote: > S> Hi, > S> > S> >1) Is the number always 4094? > S> > S> No, i see 4092, 4093 also: > S> Dec 24 09:17:0

Re: ng_mppc_decompress: too many (4094) packets dropped, disabling node

2011-12-26 Thread Sami Halabi
On Tue, Dec 27, 2011 at 9:44 AM, Sami Halabi wrote: > Hi, > > >1) Is the number always 4094? > > No, i see 4092, 4093 also: > Dec 24 09:17:04 mpd2 kernel: ng_mppc_decompress: too many (4092) packets > dropped > , disabling node 0xff003051e400! > Dec 24 09:17:04

Re: ng_mppc_decompress: too many (4094) packets dropped, disabling node

2011-12-26 Thread Sami Halabi
Hi, >Do you run the node in compression or in encryption mode? I enabled the compression in the mpd.conf if you mean that so its beoing negotiated, but isee in the mpd portal not all the clients use compression Sami 2011/12/27 Gleb Smirnoff > On Thu, Dec 15, 2011 at 09:51:09PM +0200

msi-x, net.isr, polling

2011-12-23 Thread Sami Halabi
and performance issues based on FreeBSD. can someone give light and detailed explanation about theseoptions,when should/shouldn't be used? Thanks in advance, Merry Christmas, -- Sami Halabi Information Systems Engineer NMS Projects Expert ___ fre

Re: ng_mppc_decompress: too many (4094) packets dropped, disabling node

2011-12-18 Thread Sami Halabi
m the only only that facing this problem, i wonder if people actually use 8.2-R or maybe these stuck in 7-R Thanks in advance, Sami On Mon, Dec 19, 2011 at 7:45 AM, Julian Elischer wrote: > On 12/18/11 5:20 AM, Sami Halabi wrote: > >> Hi, >> i actually tried that (setting REK

Re: Problem on re0

2011-12-18 Thread Sami Halabi
e customers connect we are routing 172.16.0.0/12 to bge1, default gateway is our peer in the other side of bge0. installed port as pptp/l2tp server is MPD. please help me its really making us troubles... Sami On Mon, Dec 19, 2011 at 4:26 AM, YongHyeon PYUN wrote: > On Sat, Dec 17, 2011 at

Re: ng_mppc_decompress: too many (4094) packets dropped, disabling node

2011-12-18 Thread Sami Halabi
Hi, i actually tried that (setting REKEY to 1500 instead of 1000) but i still see this message in the /var/log/messages... help, Sami On Sun, Dec 18, 2011 at 2:22 PM, Julian H. Stacey wrote: > Reference: > > From: Sami Halabi > > Please do not top post. > > Sami

Re: ng_mppc_decompress: too many (4094) packets dropped, disabling node

2011-12-17 Thread Sami Halabi
Hi, I'm using FBSD8.2-R-p4, i just commented that the only discussion i found is for old releases without fedback if that helped. I appreciate any help. Sami On Sat, Dec 17, 2011 at 7:48 PM, Julian H. Stacey wrote: > Hi, > Sami Halabi wrote: > > I dropped isp@ as it seems not

Re: Problem on re0

2011-12-17 Thread Sami Halabi
dev.bge.1.stats.tx.Discards: 0 dev.bge.1.stats.tx.Errors: 0 Sami On Sat, Dec 17, 2011 at 6:53 PM, Sami Halabi wrote: > Hi, > > here is # pciconf -lv | grep -A4 bge\[0-9]\@ > bge0@pci0:2:0:0:class=0x02 card=0x03781014 chip=0x165a14e4 > rev=0x00 hdr=0x00 > vend

Re: Problem on re0

2011-12-17 Thread Sami Halabi
Ethernet address: 00:1a:64:21:86:29 bge1: [ITHREAD] Thanks On Sat, Dec 17, 2011 at 6:49 PM, Sami Halabi wrote: > Hi, > > I've moved to a new server with bge card driver, similar configuration: > /etc/sysctl.conf > net.inet.flowtable.enable=0 > net.inet.ip.fastforw

Re: Problem on re0

2011-12-17 Thread Sami Halabi
v.bge.1.stats.tx.Errors: 0 this driver gives more statics... please help me, this causes us serious problems with customers. Thanks in advance, Sami On Fri, Dec 9, 2011 at 8:51 AM, Arnaud Lacombe wrote: > Hi, > > On Thu, Dec 8, 2011 at 4:52 PM, YongHyeon PYUN wrote: > > On Thu

Re: ng_mppc_decompress: too many (4094) packets dropped, disabling node

2011-12-16 Thread Sami Halabi
any ideas? Sami On Thu, Dec 15, 2011 at 9:51 PM, Sami Halabi wrote: > Hi, > > I've searched the net andfound basicly 2 threads talking about the message: > > ng_mppc_decompress: too many (4094) packets dropped, disabling node > > in FBSD 6.3 > http://lists.freeb

ng_mppc_decompress: too many (4094) packets dropped, disabling node

2011-12-15 Thread Sami Halabi
have about 200 concurrent connections, as i read MPD+FREEBSD usually can utilize thousands of sessions. Thanks in advance, -- Sami Halabi Information Systems Engineer NMS Projects Expert ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.o

Re: Problem on re0

2011-12-08 Thread Sami Halabi
hi, i can see what it does. how do i compile the driver and load it instead of the running driver without restarting? its a production server. Thanks, Sami On Thu, Dec 8, 2011 at 1:58 AM, YongHyeon PYUN wrote: > On Wed, Dec 07, 2011 at 09:55:22AM +0200, Sami Halabi wrote: > > Hi, &g

Re: Problem on re0

2011-12-06 Thread Sami Halabi
m_freem(sc->rl_head); sc->rl_head = sc->rl_tail = NULL; } re_discard_rxbuf(sc, i); continue; } these are sources for 8.2-R+p4 Sami On Wed, Dec 7, 2011 at 2:59 AM, YongHyeon PYUN wrote:

Re: Problem on re0

2011-12-05 Thread Sami Halabi
r RX or both) of controller does not >work? how i can output that? Thanks in advance, Sami On Mon, Dec 5, 2011 at 4:27 AM, YongHyeon PYUN wrote: > On Sun, Dec 04, 2011 at 07:33:01PM +0200, Sami Halabi wrote: > > Hi, > > I have a desktop on which being used as a MPD server. > &g

Re: recoomendations to a box

2011-12-04 Thread Sami Halabi
Hi, anyone would reccomend/help me? Thanks in advance, Sami On Thu, Oct 13, 2011 at 10:45 AM, Sami Halabi wrote: > Hi, > I'm using a quagga 0.99.17 box with dual cpu with 6C each,with 6GB Memory > running on FreeBSD 8.1-R-p6. > i wonder what do you think about this box on term

Re: Problem on re0

2011-12-04 Thread Sami Halabi
ernet re1@pci0:1:7:0: class=0x02 card=0x816910ec chip=0x816910ec rev=0x10 hdr=0x00 vendor = 'Realtek Semiconductor' device = 'Single Gigabit LOM Ethernet Controller (RTL8110)' class = network subclass = ethernet Sami On Sun, Dec 4, 20

Problem on re0

2011-12-04 Thread Sami Halabi
0 re01500 1.2.3.3/30 1.2.3.5 435 - - 35076 206240451 - 151252235756 - re1* 1500 00:a1:b0:69:76:280 0 0 0 0 0 0 0 Please help me debug and fix this issue... -- Sami Halabi Information Systems Eng

Re: MPD LAC Scaling

2011-11-14 Thread Sami Halabi
Hi, i wonder why not putting all your suggestions on MPD instead of making hacks, as I see it its necessary for performance, after all MPD is aimed to FBSD only, so its elementary to use ke Sami 2011/11/12 Alexander Motin > Hi. > > > I'm currently evaluating MPD as a potential

recoomendations to a box

2011-10-13 Thread Sami Halabi
ead on the mailing lists and its not that clear to me. IPFW and traffic sharing is enabled (dummynet). Any recommendation are appreciated, your opinion is extremly important to me. Thanks in advance, -- Sami Halabi Information Systems Engineer NMS Proje

  1   2   >